LayerZero 和空投前對 sybil 的追捕：抓住了用戶“Ruslan”

「Ruslan」的故事開始於匿名用戶，為了獲得最好的LayerZero空投並獲得最大可能的ZRO代幣分配

The LayerZero airdrop is getting closer and closer, and the crypto community is abuzz with anticipation. Rewards in the form of the ZRO token are expected to arrive in June.

LayerZero 空投越來越近，加密社群充滿期待。 ZRO 代幣形式的獎勵預計將於 6 月到達。

One Web3 user, known as “Ruslan,” is going all out to maximize his potential allocation. With hundreds of wallets at his disposal, Ruslan is actively hunting airdrops from upcoming projects.

一位被稱為「Ruslan」的 Web3 用戶正在全力以赴地最大化他的潛在分配。魯斯蘭擁有數百個錢包可供使用，他正在積極尋找即將推出的項目的空投。

However, despite his impressive setup, Ruslan made a crucial error that could cost him dearly.

然而，儘管魯斯蘭的設定令人印象深刻，但他還是犯了一個致命的錯誤，可能會讓他付出慘痛的代價。

Let’s dive into the story and uncover Ruslan's mistake.

讓我們深入了解這個故事並揭開魯斯蘭的錯誤。

Ruslan's Airdrop Hunting Strategy

魯斯蘭的空投狩獵策略

Ruslan's goal is to farm the best LayerZero airdrop and obtain the largest possible allocation of ZRO tokens. To achieve this, he is using hundreds of different addresses to execute various types of on-chain transactions.

Ruslan 的目標是種植最好的 LayerZero 空投並獲得最大可能的 ZRO 代幣分配。為了實現這一目標，他使用數百個不同的地址來執行各種類型的鏈上交易。

Ruslan began farming the airdrop with each of these addresses in 2023, using the Stargate bridge and other dapps that are based on LayerZero's omnichain technology.

Ruslan 於 2023 年開始使用 Stargate 橋和其他基於 LayerZero 全鏈技術的 dapp 透過這些位址進行空投。

Despite the high number of entities connected to each other (having exchanged funds with each other to finance the interactions), Ruslan still finds an idea to manage to evade the anti-sybil checks and make each address appear as standalone.

儘管有大量實體相互連接（相互交換資金以資助互動），Ruslan 仍然找到了一個想法來設法逃避反女巫檢查並使每個地址顯示為獨立的。

Maybe under some advice from another user X, decides to associate an ENS domain with every address he had interacted with to position himself for the LayerZero airdrop, convinced that the on-chain analysis systems would identify his wallets as authentic.

也許在另一個用戶 X 的建議下，決定將 ENS 網域與他互動過的每個位址相關聯，以便為 LayerZero 空投定位自己，並確信鏈上分析系統會識別他的錢包是真實的。

In fact, sybil addresses are usually characterized by a low quality in the history of tx, with few low-value transactions, often advanced by bots and managed by automated scripts: an ENS domain can therefore increase the quality of its portfolio by adding a cryptographic component usually excluded from the economic operations of bot farming.

事實上，女巫地址的特點通常是交易歷史品質低，很少有低價值交易，通常由機器人推進並由自動化腳本管理：因此，ENS 域可以透過添加加密技術來提高其投資組合的品質通常被排除在機器人養殖的經濟運作之外。

To carry forward this hedging strategy, Ruslan also spends a considerable amount, exceeding 3000 dollars between registration costs at Ethereum Name Service and Ethereum blockchain commission costs, in addition to obviously all the fees paid for farming.

為了推進這項對沖策略，Ruslan 還花費了相當大的金額，除了顯然支付的所有耕作費用之外，以太坊名稱服務的註冊成本和以太坊區塊鏈佣金成本也超過了 3000 美元。

Ruslan's Brilliant (or Not So Brilliant) Idea

魯斯蘭的絕妙（或不那麼絕妙）想法

The problem is that Ruslan comes up with the brilliant idea of sequentially naming all the domains he bought, going in order as follows: ruslan002.eth, ruslan003.eth, ruslan004.eth, ruslan005.eth, ruslan006.eth, ruslan007.eth, ruslan008.eth, etc.

問題是，Ruslan 想出了一個絕妙的主意，按順序命名他購買的所有域名，順序如下：ruslan002.eth、ruslan003.eth、ruslan004.eth、ruslan005.eth、ruslan006.eth、ruslan007.eth， ruslan008. eth 等

One forgets that by sequentially identifying its addresses, these could be considered as connected to each other, being in fact linked by a fairly obvious logical thread that sees a progressive on-chain identifying name.

人們忘記了，通過順序識別其地址，這些地址可以被認為是相互連接的，實際上是通過一個相當明顯的邏輯線程鏈接的，該邏輯線程看到一個漸進的鏈上識別名稱。

Ruslan's Misfortune

魯斯蘭的不幸

After the LayerZero team and its CEO Bryan Pellegrino kicked off the “sybil bounty” phase, inviting the crypto community to report improper behavior by other users, it didn’t take long before Ruslan was identified and marked under the sybil list on Github.

在 LayerZero 團隊及其首席執行官 Bryan Pellegrino 啟動“女巫賞金”階段，邀請加密社區舉報其他用戶的不當行為後，沒過多久，Ruslan 就被識別並標記在 Github 上的女巫列表中。

Most likely Ruslan and his addresses will not receive any reward from the LayerZero airdrop, and indeed, a portion equal to 10% of the allocation that would have been due to him will go to the address 0xc37395f3aca821f1f85D897Ee541BCdB4C5B7c7E, owned by the user who reported him with a detailed report.

Ruslan 和他的地址很可能不會從 LayerZero 空投中獲得任何獎勵，事實上，相當於他分配的 10% 的部分將流向地址 0xc37395f3aca821f1f85D897Ee541BCdB4C5B7c7E，該地址由他的用戶報告詳細的報告。

A Closer Look at Ruslan's Behavior

仔細觀察魯斯蘭的行為

Observing more closely the behaviors of Ruslan, we realize how the user is not exactly a newcomer in the crypto world.

更仔細地觀察 Ruslan 的行為，我們意識到該用戶並不完全是加密世界的新人。

Recently, he managed to become eligible for various airdrops such as AltLayer, Eigenlayer, Omni and Renzo, bringing home decent earnings.

最近，他成功獲得了 AltLayer、Eigenlayer、Omni 和 Renzo 等各種空投的資格，並獲得了可觀的收入。

The poor Ruslan simply made a serious distraction error, or he was excessively superficial in thinking that the insiders at LayerZero would never consider the progressive ENS domains.

可憐的 Ruslan 只是犯了一個嚴重的分心錯誤，或者他過於膚淺地認為 LayerZero 的內部人士永遠不會考慮先進的 ENS 領域。

The Aftermath: Ruslan's ENS Domains Up for Grabs

後果：Ruslan 的 ENS 域名可供爭奪

In the blink of an eye, the entire community turned Ruslan into a viral meme, which spread across all the X boards of the airdrop farmers.

一眨眼的功夫，整個社區就把魯斯蘭變成了病毒式的迷因，傳遍了空投農民的所有 X 版塊。

There are even those who have come to his defense, pointing out to Bryan Pellegrino of LayerZero that the addresses in question could belong to a long list of family members of the reported user and that it is not fair to identify them as sybil a priori.

甚至有人為他辯護，向 LayerZero 的 Bryan Pellegrino 指出，相關地址可能屬於被舉報用戶的一長串家庭成員，將他們先驗地認定為女巫是不公平的。

Ruslan's Misfortune Continues

魯斯蘭的不幸仍在繼續

Poor Ruslan, he was farming LayerZero more than a year ago and it seems he bought ENS Domains for his wallets less than 2 months ago (check the examples). You can see clear sybil activity as he for example bridges 0.09 usdc using stargate. Poor Ruslan pic.twitter.com/QZ0D5uEEcP

可憐的 Ruslan，他一年多前就開始耕種 LayerZero，而且他似乎在不到 2 個月前為自己的錢包購買了 ENS 域名（查看示例）。您可以看到明顯的 sybil 活動，例如他使用 Stargate 橋接 0.09 usdc。可憐的魯斯蘭 pic.twitter.com/QZ0D5uEEcP

Meanwhile, Ruslan has put his ENS domains up for sale at 5 ETH

同時，Ruslan 已將他的 ENS 域名以 5 ETH 的價格出售