LayerZero 和空投前对 sybil 的追捕：抓住了用户“Ruslan”

“Ruslan”的故事开始于匿名用户，为了获得最好的LayerZero空投并获得最大可能的ZRO代币分配

The LayerZero airdrop is getting closer and closer, and the crypto community is abuzz with anticipation. Rewards in the form of the ZRO token are expected to arrive in June.

LayerZero 空投越来越近，加密社区充满期待。 ZRO 代币形式的奖励预计将于 6 月到达。

One Web3 user, known as “Ruslan,” is going all out to maximize his potential allocation. With hundreds of wallets at his disposal, Ruslan is actively hunting airdrops from upcoming projects.

一位被称为“Ruslan”的 Web3 用户正在全力以赴地最大化他的潜在分配。鲁斯兰拥有数百个钱包可供使用，他正在积极寻找即将推出的项目的空投。

However, despite his impressive setup, Ruslan made a crucial error that could cost him dearly.

然而，尽管鲁斯兰的设置令人印象深刻，但他还是犯了一个致命的错误，可能让他付出惨重的代价。

Let’s dive into the story and uncover Ruslan's mistake.

让我们深入了解这个故事并揭开鲁斯兰的错误。

Ruslan's Airdrop Hunting Strategy

鲁斯兰的空投狩猎策略

Ruslan's goal is to farm the best LayerZero airdrop and obtain the largest possible allocation of ZRO tokens. To achieve this, he is using hundreds of different addresses to execute various types of on-chain transactions.

Ruslan 的目标是种植最好的 LayerZero 空投并获得最大可能的 ZRO 代币分配。为了实现这一目标，他使用数百个不同的地址来执行各种类型的链上交易。

Ruslan began farming the airdrop with each of these addresses in 2023, using the Stargate bridge and other dapps that are based on LayerZero's omnichain technology.

Ruslan 于 2023 年开始使用 Stargate 桥和其他基于 LayerZero 全链技术的 dapp 通过这些地址进行空投。

Despite the high number of entities connected to each other (having exchanged funds with each other to finance the interactions), Ruslan still finds an idea to manage to evade the anti-sybil checks and make each address appear as standalone.

尽管有大量实体相互连接（相互交换资金以资助交互），Ruslan 仍然找到了一个想法来设法逃避反女巫检查并使每个地址显示为独立的。

Maybe under some advice from another user X, decides to associate an ENS domain with every address he had interacted with to position himself for the LayerZero airdrop, convinced that the on-chain analysis systems would identify his wallets as authentic.

也许在另一个用户 X 的建议下，决定将 ENS 域与他交互过的每个地址相关联，以便为 LayerZero 空投定位自己，并确信链上分析系统会识别他的钱包是真实的。

In fact, sybil addresses are usually characterized by a low quality in the history of tx, with few low-value transactions, often advanced by bots and managed by automated scripts: an ENS domain can therefore increase the quality of its portfolio by adding a cryptographic component usually excluded from the economic operations of bot farming.

事实上，女巫地址的特点通常是交易历史质量低，很少有低价值交易，通常由机器人推进并由自动化脚本管理：因此，ENS 域可以通过添加加密技术来提高其投资组合的质量通常被排除在机器人养殖的经济运营之外。

To carry forward this hedging strategy, Ruslan also spends a considerable amount, exceeding 3000 dollars between registration costs at Ethereum Name Service and Ethereum blockchain commission costs, in addition to obviously all the fees paid for farming.

为了推进这一对冲策略，Ruslan 还花费了相当大的金额，除了显然支付的所有耕作费用之外，以太坊名称服务的注册成本和以太坊区块链佣金成本也超过了 3000 美元。

Ruslan's Brilliant (or Not So Brilliant) Idea

鲁斯兰的绝妙（或不那么绝妙）想法

The problem is that Ruslan comes up with the brilliant idea of sequentially naming all the domains he bought, going in order as follows: ruslan002.eth, ruslan003.eth, ruslan004.eth, ruslan005.eth, ruslan006.eth, ruslan007.eth, ruslan008.eth, etc.

问题是，Ruslan 想出了一个绝妙的主意，按顺序命名他购买的所有域名，顺序如下：ruslan002.eth、ruslan003.eth、ruslan004.eth、ruslan005.eth、ruslan006.eth、ruslan007.eth， ruslan008.eth 等

One forgets that by sequentially identifying its addresses, these could be considered as connected to each other, being in fact linked by a fairly obvious logical thread that sees a progressive on-chain identifying name.

人们忘记了，通过顺序识别其地址，这些地址可以被认为是相互连接的，实际上是通过一个相当明显的逻辑线程链接的，该逻辑线程看到一个渐进的链上识别名称。

Ruslan's Misfortune

鲁斯兰的不幸

After the LayerZero team and its CEO Bryan Pellegrino kicked off the “sybil bounty” phase, inviting the crypto community to report improper behavior by other users, it didn’t take long before Ruslan was identified and marked under the sybil list on Github.

在 LayerZero 团队及其首席执行官 Bryan Pellegrino 启动“女巫赏金”阶段，邀请加密社区举报其他用户的不当行为后，没过多久，Ruslan 就被识别并标记在 Github 上的女巫列表中。

Most likely Ruslan and his addresses will not receive any reward from the LayerZero airdrop, and indeed, a portion equal to 10% of the allocation that would have been due to him will go to the address 0xc37395f3aca821f1f85D897Ee541BCdB4C5B7c7E, owned by the user who reported him with a detailed report.

Ruslan 和他的地址很可能不会从 LayerZero 空投中获得任何奖励，事实上，相当于他分配的 10% 的部分将流向地址 0xc37395f3aca821f1f85D897Ee541BCdB4C5B7c7E，该地址由举报他的用户拥有一份详细的报告。

A Closer Look at Ruslan's Behavior

仔细观察鲁斯兰的行为

Observing more closely the behaviors of Ruslan, we realize how the user is not exactly a newcomer in the crypto world.

更仔细地观察 Ruslan 的行为，我们意识到该用户并不完全是加密世界的新人。

Recently, he managed to become eligible for various airdrops such as AltLayer, Eigenlayer, Omni and Renzo, bringing home decent earnings.

最近，他成功获得了 AltLayer、Eigenlayer、Omni 和 Renzo 等各种空投的资格，并获得了可观的收入。

The poor Ruslan simply made a serious distraction error, or he was excessively superficial in thinking that the insiders at LayerZero would never consider the progressive ENS domains.

可怜的 Ruslan 只是犯了一个严重的分心错误，或者他过于肤浅地认为 LayerZero 的内部人士永远不会考虑先进的 ENS 领域。

The Aftermath: Ruslan's ENS Domains Up for Grabs

后果：Ruslan 的 ENS 域名可供争夺

In the blink of an eye, the entire community turned Ruslan into a viral meme, which spread across all the X boards of the airdrop farmers.

一眨眼的功夫，整个社区就把鲁斯兰变成了病毒式的模因，传遍了空投农民的所有 X 版块。

There are even those who have come to his defense, pointing out to Bryan Pellegrino of LayerZero that the addresses in question could belong to a long list of family members of the reported user and that it is not fair to identify them as sybil a priori.

甚至还有人为他辩护，向 LayerZero 的 Bryan Pellegrino 指出，相关地址可能属于被举报用户的一长串家庭成员，将他们先验地认定为女巫是不公平的。

Ruslan's Misfortune Continues

鲁斯兰的不幸还在继续

Poor Ruslan, he was farming LayerZero more than a year ago and it seems he bought ENS Domains for his wallets less than 2 months ago (check the examples). You can see clear sybil activity as he for example bridges 0.09 usdc using stargate. Poor Ruslan pic.twitter.com/QZ0D5uEEcP

可怜的 Ruslan，他一年多前就开始耕种 LayerZero，而且他似乎在不到 2 个月前为自己的钱包购买了 ENS 域名（查看示例）。您可以看到明显的 sybil 活动，例如他使用 Stargate 桥接 0.09 usdc。可怜的鲁斯兰 pic.twitter.com/QZ0D5uEEcP

Meanwhile, Ruslan has put his ENS domains up for sale at 5 ETH

与此同时，Ruslan 已将他的 ENS 域名以 5 ETH 的价格出售