How to ensure that the airdrop will not be reported as a sybil attack
Original author: Auri, DeFi player
Original compilation: Leo, BlockBeats
Editor's note
Recently, the news of the Aptos testnet airdrop once again drove the circle The upsurge of airdrops has exploded a lot of strategies for airdrops. Previously, after Hop and Optimism officially announced the airdrop news, through screening, testing, and community reporting, they identified Sybil attacks and canceled the airdrop qualifications of a large number of users. Hop even implemented a reward system for reporting. This article compiles some content about "how to avoid being judged as a sybil attack" by DeFi player Auri for your reference:
Text
Some people are Sybil attacks on crypto projects, netting upwards of $500,000 per massive airdrop. I once spoke to a crypto whale who performed millions of industrialized "batch airdrops". Here is a selection of the conversation:
Disclaimer, I don't support Sybil attacks, in fact I want the project to stop going this way Make money, you can reduce fomo. But in other words, this is by far the way to insanely accumulate wealth without any advanced technology.
The process of a sybil attack consists of four main stages:
1. Distribute the desired crypto assets to multiple addresses
3. High level witches Practical operation
4. Withdraw token
5. Operation
6. Future Airdrop
In the first four stages - the goal is to hide the address on the chain and the chain any connection between the following addresses (ip isolation)
encrypted asset distribution
< br>
To fund the wallet, use CEX:
- Lower Withdrawal Fee
-Create Sub Account
From any exchange, bridge platform, or any platform that generates thousands of withdrawals or cancellations per day is fine, but really, CEX is the best.
The choice of platform is crucial: use an anonymization service, otherwise encryption rules will be pasted when you batch transactions "sybilooor" label. The next level is to ensure random numbers of tokens are sent at different times from trusted CEXs.
On-chain preparation
First make sure the address looks real. Giant Whale uses an anti-detection browser, each individual address has a dedicated fingerprint and proxy, and all front-end interactions are performed through a dedicated configuration file.
Key takeaways from the recommendation:
-The "age" of the wallet, that is, the date of the first transaction, the earlier the better
-High random Number (of transactions)
-Affair with other wallets is strictly prohibited
-Configure different token combinations (including NFT) on different chains
-Address Relatively high net worth ($100 and above is good). For example, the latter two are the most important for NFT raffles activity.
More targeted advanced advice:
< /p>
-Increase your Degen score (BlockBeats note: Degen score is an evaluation network to measure how many projects your wallet address participates in. Many projects will judge whether you are eligible to participate in air investment based on this standard.)
-buy ENS
-for each address to create and manage dedicated social platforms (Twitter and Discord)
This is enough for 95% of people , but if you're running an industrialized "batch airdrop," you might take additional steps.
Now let's talk about the highest level of practice for professional witches. Whale said that after HOP and Optimism are doing Sybil hunting, it is not new that the protocol will try to implement some form of Sybil resistance. So I asked him what would he do?
High Level Sybil Attack
The giant whale now considers other factors:
-interactive mode
-Frequency
-Volume
-On-chain KYC
For example, interactive mode means interaction delay between different addresses - Need to make sure there are transactions between your address and a set of other addresses, especially if you are dealing with a relatively unpopular contract.
It also includes the order of operations/interactions, and whether they make sense. For example, bridging to a different chain just to cross the bridge is a sure sign that someone is Sybil attacking. Or, for example, if you want to perform a series of repeated operations across 100 addresses, such as swap, send, and provide liquidity on a specific DEX, then you need to mix and randomize such operations.
As for the frequency, the more the better, but all you need is to pass the unknown minimum threshold and not arouse suspicion. The same goes for volume: you don't need thousands of dollars to operate; $10-20 is fine; but avoid too small a bankroll.
The giant whale uses Dune to analyze how to differentiate yourself from the 80%+ case while maintaining maximum capital size. For example, if you want to bridge 0.1 ETH to zkSync, your bridge volume will exceed 73% of users. Your goal is to consistently be in the top percentile on as many metrics as possible.
Speaking of KYC on the chain, the giant whale recently purchased 500+ Galxe ID and Binance BAB token to verify the ID on the chain . Additionally, he wishes to fill out a Gitcoin Passport and purchase 500 Bright ids.
Withdraw token
Suppose you received a large airdrop, now what?
To withdraw cash, the best thing to do is to deposit to a unique deposit address on CEX. Because 100 separate accounts can be difficult to handle, our whale users prefer to use an account with 10 sub-accounts.
For future consideration, it might be a good idea to reserve a portion of the airdrop (5-10%) so addresses are not flagged for spam addresses. He thinks Optimism may use this as the standard for the second airdrop.
However, ideally, you sell the airdrop and use the money to support future operations, so that your wallet There will be nothing left in it, and it will not expose you to any risk when connecting to your address.
In his view, during a bear market (and low gas) take the time to establish trusted on-chain addresses is the best investment.
Operation
Whale has an offline office with 3 full-time employees and 1 supervisor. He paid them a relatively high salary, about $700 a month. More recently, they have introduced security measures such as CCTV and occasional video recording.
They have been working for over a year without any problems. He did not provide further details on safety measures and employee relations.
Future Airdrop
He focuses primarily on high-valued, US-based VC-backed projects. Even if it is a small piece of "cake", the personal benefits of batch operations are still huge. Not much alpha, here's a list of projects he's currently working on: Arbitrum, Optimism, zkSync, LayerZero, Layer3(?)
In summary, I think crypto projects should start to take Sybil attacks more seriously, and rethink their approach.
The best example of Sybil protection is the GyroStable protocol. On a larger scale, I think Optimism's approach is quite effective.
Welcome to join the official BlockBeats community:
Telegram Subscription Group: https://t.me/theblockbeats
Telegram Discussion Group: https://t.me/BlockBeats_App
Official Twitter Account: https://twitter.com/BlockBeatsAsia
Related Articles
