Sybil Attack

A Sybil attack is when a single person or group creates a large number of fake identities to gain disproportionate influence in a system designed to treat all participants as independent and equal. The name comes from a 1973 book about a person with multiple personality disorder. In decentralized networks where decisions, votes, or rewards are distributed among participants, the security model depends on identities being unique. If one actor can pretend to be thousands of different participants, they can overwhelm the system’s democratic or trust-based mechanisms.

In blockchain and crypto contexts, Sybil attacks are a constant design concern. Peer-to-peer networks that give each node equal weight can be manipulated if one attacker controls hundreds of nodes. Airdrop systems that try to reward real users fairly can be gamed by someone running hundreds of wallets through the required actions. Decentralized governance systems where one wallet equals one vote can be captured by someone who fragments their holdings across thousands of wallets to amplify their voting power beyond what their stake would normally allow.

Different systems use different approaches to resist Sybil attacks. Proof of Work requires real computational investment, making it expensive to create many “identities.” Proof of Stake ties influence to staked capital, which is difficult to fake. More experimental approaches attempt to verify personhood (proving each address belongs to a unique human) through social graphs, biometrics, or community vouching systems.

Example: Imagine an online poll where anyone can vote and there is no login required. A person who wants to skew the results simply opens 500 browser tabs and votes 500 times. The poll is supposed to measure public opinion, but one person has essentially hijacked it. A Sybil attack in crypto is the digital equivalent — one actor impersonating thousands to tilt outcomes in their favor.