A bot farm wrecked our airdrop. Twelve thousand accounts registered. Not one
of them was a person.
If you are running a giveaway through Telegram channels, the same thing can
happen to you — and most projects never find out. Founders count the
registrations, celebrate the growth, report it to investors. Then on listing
day the farm sells everything at once and the price collapses on the real
people who did show up.
What happened to us, briefly:
We set aside 10,000 free spots. Within 48 hours a farm had taken almost all of
them. Ten referral links brought 300, 300, 300, 299, 299, 298 people each — ten
real people do not land within three of each other.
The captcha did not stop them. Cloudflare Turnstile was solved twelve thousand
times; solving services cost about a dollar per thousand.
They attached 12,680 wallets, every single address different.
We got off lightly, because we have no token and nothing to sell. Projects with
a token will not be that lucky.
In the full write-up: how we identified them step by step, the SQL query you can
run on your own project right now, and the one thing that finally cleared them
off the board.
[A BOT FARM ATE OUR AIRDROP — AND GOT NOTHING](https://www.binance.com/en/square/post/358756511214456)
#Airdrop #Sybil #Web3Security #BotFarm #LastPixelLive
of them was a person.
If you are running a giveaway through Telegram channels, the same thing can
happen to you — and most projects never find out. Founders count the
registrations, celebrate the growth, report it to investors. Then on listing
day the farm sells everything at once and the price collapses on the real
people who did show up.
What happened to us, briefly:
We set aside 10,000 free spots. Within 48 hours a farm had taken almost all of
them. Ten referral links brought 300, 300, 300, 299, 299, 298 people each — ten
real people do not land within three of each other.
The captcha did not stop them. Cloudflare Turnstile was solved twelve thousand
times; solving services cost about a dollar per thousand.
They attached 12,680 wallets, every single address different.
We got off lightly, because we have no token and nothing to sell. Projects with
a token will not be that lucky.
In the full write-up: how we identified them step by step, the SQL query you can
run on your own project right now, and the one thing that finally cleared them
off the board.
[A BOT FARM ATE OUR AIRDROP — AND GOT NOTHING](https://www.binance.com/en/square/post/358756511214456)
#Airdrop #Sybil #Web3Security #BotFarm #LastPixelLive