History – Sybil resistance in DAOs
Back1 block modified
- Modified – Text at Block 2
Sybil resistance is a DAO's de…ntless instead. Voting weight
is the productdepends ofn a member's stake and their de…hip/soulbound-tokens) minted1 perby casting ranked ballots and on nothing else, and neve…extra identities pointless isthe shape of the formulahow the weight combines the two rather than any barrier to earning the record:weight is w = (t · v) / (V · T), a product, sosplitting one position acrossnseveral walletsdivides both factors by n and leaves each wallet with w/n² – w/n combined,leaves them with less combined weight than the single position had, so splitting is strictly worse than not split…sts/article/governance-faq/) .
2 blocks modified
- Modified – Text at Block 1 → Block 1
Topic Stopping one actor from … Sybil attack (Douceur, 2002)
—– one entity forging many ident…curity-and-governance-attacks) - Modified – Text at Block 2
Sybil resistance is a DAO's de… by anything other than money
—– one-person-one-vote, quadrat…vernance-models) , reputation—– a cheap way to mint fake memb…. Why token voting sidesteps—– and re-creates—– the problem Plain token-wei…ce is bought at a steep price—– it is simply plutocracy, wher… weighting votes more equally—– giving each person a say rather than each token—– immediately re-opens the Sybi…tance to fakery: - Biometric—– World ID (Worldcoin) (https:…st) ). - Vouching + registry—– Proof of Humanity (https://p…nce is not an abstract nicety—– it is the load-bearing assump… not attempts to swing a vote—– they are attempts to collect …t of the recovered allocation—– crowdsourced detection in pla…de two subtractive heuristics—– minus one point if every tran… two points and still qualify—– a deliberate choice to under-… proof of personhood entirely—– a verified-unique human can s…ised, not a box to be checked—– which is why many DAOs layer …each member is a unique human—– it makes extra identities poi… leaves each wallet with w/n²—– w/n combined, strictly worse … cheap half of a Sybil attack—– manufacturing identities—– actively costs influence; the…on/the-sybil-attack/) (2002)—– the founding statement of the…sts/article/governance-faq/) .
1 block modified
- Modified – Text at Block 2
Sybil resistance is a DAO's de…rse than not splitting at all.The cheap half of a Sybil atta…sts/article/governance-faq/) .
1 block modified
- Modified – Text at Block 2
Sybil resistance is a DAO's de…ck to the underlying identity. Vocdoni (/wiki/dao-governance/tooling/voting/vocdoni) 's Ask the World pilot admits each voter on a zero-knowledge passport proof and then takes an encrypted ballot. ( Vitalik Buterin: What do I …sts/article/governance-faq/) .
1 block modified
- Modified – Text at Block 2
Sybil resistance is a DAO's de…acy concerns. - Social graph
—– BrightID (https://www.bright… genuine social connections. - Attested trust graphs – Agora (/wiki/dao-governance/tooling/voting/agora) 's Open Trust, in alpha since August 2026, records each vouch, and its withdrawal, as an Ethereum Attestation Service attestation, and freezes each graph's rules and scoring algorithm (hop decay or EigenTrust) the same way, so any application can recompute a score rather than trust the operator's. Its announcement concedes that one company running the only implementation falls short of the open standard it wants ( Agora (https://www.agora.xyz/blogs/21-open-trust) ). - Vouching + registry — Proof…sts/article/governance-faq/) .
1 block modified
- Modified – Text at Block 2
Sybil resistance is a DAO's de…rd. - Credential aggregation
—– Human Passport (/wiki/dao-go… on any one identity provider. Snapshot (/wiki/dao-governance/tooling/voting/snapshot) adopted it in November 2022 as its first voting-validation strategy, which lets a space require chosen stamps before a vote counts at all ( Snapshot Labs (https://paragraph.com/@shot/introducing-voting-validation) ). Zero-knowledge techniques in…sts/article/governance-faq/) .
1 block modified
- Modified – Text at Block 2
Sybil resistance is a DAO's de…inted 1 per ranked ballot and
0.01 per XRD of gross value on each leg of a tradon nothing else, and never transferable betw…ts. Anyone may mint their ownat that published rateby voting; nobody can acquire anybody e…sts/article/governance-faq/) .
1 block modified
- Modified – Text at Block 2
Sybil resistance is a DAO's de…hip/soulbound-tokens) minted
one per vote that c1 per ranked ballot and 0.01 per XRD of gross value on each leg of a trade, and neverbetransferred or bought. A freshly created wallet therefore starts with zero participation and casts a zero-weight first vote, so spinning up extra empty identities addable between wallets. Anyone may mint their own at that published rate; nobody can acquire anybody else's. What makes extra identities pointless is the shape of the formula rather than any barrier to earning the record: weight is w = (t · v) / (V · T), a product, so splitting one position across n wallets dividesnbothing: each one would have to independently acquire real stake and vote, repeatedly, to earn any weightfactors by n and leaves each wallet with w/n² — w/n combined, strictly worse than not splitting at all. The cheap half of a S… — manufacturing identities —buys noactively costs influence; the expensive half— genuine stake and repeated participation from every identity — is exactly what an honest, engaged member already doesis simply buying more stake, which a caper prices on its bonding curve (/wiki/markets/bonding-curve) and does not pretend to prevent. It is a participation gate, …sts/article/governance-faq/) .
1 block modified
- Modified – Text at Block 2
Sybil resistance is a DAO's de…ember's pro-rata exit (/wiki/
governance/executionfoundations/leaving-a-caper) claim on the treasury. Ref…sts/article/governance-faq/) .
2 blocks modified
- Modified – Text at Block 1 → Block 1
Topic Stopping one actor from …rightID · Proof of Humanity ·
Gitcoin PHuman Passport (/wiki/dao-governance/tooling/membership/human-passport) Central tension Sybil resist…curity-and-governance-attacks) - Modified – Text at Block 2
Sybil resistance is a DAO's de… - Credential aggregation —
Gitcoin Passport (https://www.gitcoin.co/)Human Passport (/wiki/dao-governance/tooling/membership/human-passport) (built at Gitcoin as Gitcoin Passport) combines many weaker "stamps"…sts/article/governance-faq/) .
2 blocks modified
- Modified – Text at Block 1 → Block 1
Topic Stopping one actor from … Governance models (/wiki/dao
s-governance/concepts/fundamentals/dao-gov…ken-weighted voting (/wiki/daos-governance/concepts/voting/token-weighte… Governance attacks (/wiki/daos-governance/concepts/analysis/dao-security-and-governance-attacks) - Modified – Text at Block 2
Sybil resistance is a DAO's de…cipants. For a DAO (/wiki/dao
s-governance/concepts/fundamentals/what-is…, quadratic voting (/wiki/daos-governance/concepts/fundamentals/dao-gov…ken-weighted voting (/wiki/daos-governance/concepts/voting/token-weighte… voting and funding (/wiki/daos-governance/concepts/voting/quadratic-vot…/arxiv.org/abs/2008.05300) ) Airdrop farming: Sybil attacks for money, not votes The Sybil attacks DAOs actually meet at scale are not attempts to swing a vote — they are attempts to collect a distribution many times over. An airdrop (/wiki/economics/airdrops-and-token-distribution) pays per qualifying address, so an attacker who can generate a thousand addresses that each clear the eligibility bar collects a thousand allocations, and no personhood layer stands between them and the money. The defence has therefore been behavioural clustering rather than identity: group addresses by funding source, transaction timing and interaction pattern, and disqualify the clusters. Two artefacts show how far that got. Hop Protocol opened a public GitHub repository (https://github.com/hop-protocol/hop-airdrop) where anyone could file a Sybil report against its own airdrop, paying reporters out of the recovered allocation — crowdsourced detection in place of an identity system. The Arbitrum Foundation then reused the output: its published eligibility rules (https://docs.arbitrum.foundation/airdrop-eligibility-distribution) disqualify outright any address flagged in the Hop bounty, alongside two subtractive heuristics — minus one point if every transaction in the wallet falls inside a single 48-hour window, minus one if the wallet holds under 0.005 ETH and has touched fewer than two contracts. Both details are worth sitting with. A bug-bounty issue tracker became the industry's shared blocklist, which is what an identity layer looks like when nobody has built one. And the heuristics are deductions rather than exclusions, so a farmer can lose two points and still qualify — a deliberate choice to under-punish rather than strip a genuine user, and an admission that the classifier is not good enough to be trusted with a hard cut. The hard limits No personhood… a soulbound token (/wiki/daos-governance/concepts/membership/soulbound…sts/article/governance-faq/) .
2 blocks modified
- Modified – Text at Block 1 → Block 1
Topic Stopping one actor from … Governance models (/wiki/daos/concepts/fundamentals/dao-governance-models) , Token-weighted voting (/wiki/daos/concepts/voting/token-weighted-voting) , Governance attacks (/wiki/daos/concepts/analysis/dao-security-and-governance-attacks)
- Modified – Text at Block 2
Sybil resistance is a DAO's de…cipants. For a DAO (/wiki/daos/concepts/fundamentals/what-is-a-dao) the stakes are…, quadratic voting (/wiki/daos/concepts/fundamentals/dao-governance-models) , reput…ken-weighted voting (/wiki/daos/concepts/voting/token-weighted-voting) is Syb… voting and funding (/wiki/daos/concepts/voting/quadratic-voting-and-funding) … a soulbound token (/wiki/daos/concepts/membership/soulbound-tokens) minted one …sts/article/governance-faq/) .
1 block modified
- Modified – Text at Block 2
Sybil resistance is a DAO's de…participation is tracked by a soulbound token (/wiki/dao/concepts/soulbound-tokens) minted one per vote that can n…sts/article/governance-faq/) .
1 block modified
- Modified – Text at Block 2
Sybil resistance is a DAO's de…ption under quadratic voting and funding (/wiki/dao/concepts/
dao-governance-models) and quadraticquadratic-voting-and-funding) . Quadratic schemes deliberate…sts/article/governance-faq/) .
2 blocks added
- Added – Text at Block 1 → Block 1
Topic Stopping one actor from posing as many to capture a non-plutocratic vote Named after The Sybil attack (Douceur, 2002) — one entity forging many identities Approaches Token cost (plutocratic) · Proof-of-personhood · Social-graph vouching · Credential/stamp aggregation · Participation gating Systems World ID · BrightID · Proof of Humanity · Gitcoin Passport Central tension Sybil resistance ↔ privacy, inclusivity, and coercion-resistance Related Governance models (/wiki/dao/concepts/dao-governance-models) , Token-weighted voting (/wiki/dao/concepts/token-weighted-voting) , Governance attacks (/wiki/dao/concepts/dao-security-and-governance-attacks)
- Added – Text at Block 2
Sybil resistance is a DAO's defence against one person secretly controlling many identities in order to swing a vote. The name comes from a 2002 paper by John Douceur (https://www.microsoft.com/en-us/research/publication/the-sybil-attack/) (itself borrowing the title of a book about multiple-personality disorder), which showed that in any open, permissionless system without a trusted identity authority, a single adversary can forge enough distinct identities to overwhelm honest participants. For a DAO (/wiki/dao/concepts/what-is-a-dao) the stakes are direct: the moment voting power is measured by anything other than money — one-person-one-vote, quadratic voting (/wiki/dao/concepts/dao-governance-models) , reputation — a cheap way to mint fake members is a cheap way to seize the treasury. Why token voting sidesteps — and re-creates — the problem Plain token-weighted voting (/wiki/dao/concepts/token-weighted-voting) is Sybil-resistant by construction: splitting your tokens across a thousand wallets gives you exactly the same total voting power, so fake identities buy nothing. That resistance is bought at a steep price — it is simply plutocracy, where whoever holds the most tokens decides. Every attempt to soften plutocracy by weighting votes more equally — giving each person a say rather than each token — immediately re-opens the Sybil door, because now each additional identity is worth something. Sybil resistance and resistance to plutocracy pull against each other, and bridging them is the central unsolved problem of egalitarian on-chain governance. ( a16z governance FAQ (https://a16zcrypto.com/posts/article/governance-faq/) ) Proof of personhood The dominant answer is proof of personhood: a credential asserting that a wallet belongs to a distinct, unique human, without necessarily revealing which human. The leading approaches trade off differently on privacy, decentralization, and resistance to fakery: - Biometric — World ID (Worldcoin) (https://world.org/) scans a person's iris with a physical "Orb" and issues a unique, privacy-preserving credential. Strong uniqueness guarantees, but it centralizes hardware and raises biometric-privacy concerns. - Social graph — BrightID (https://www.brightid.org/) establishes uniqueness through a graph of mutual verifications in video calls, on the theory that fake accounts cannot easily forge dense, genuine social connections. - Vouching + registry — Proof of Humanity (https://proofofhumanity.id/) maintains an on-chain registry of humans, each entry backed by a video and a deposit, and challengeable by anyone for a reward. - Credential aggregation — Gitcoin Passport (https://www.gitcoin.co/) combines many weaker "stamps" (accounts, credentials, prior on-chain activity) into a single Sybil-resistance score, avoiding reliance on any one identity provider. Zero-knowledge techniques increasingly sit on top of these, letting a voter prove "I am a unique registered human" without linking the vote back to the underlying identity. ( Vitalik Buterin: What do I think about biometric proof of personhood? (https://vitalik.eth.limo/general/2023/07/24/biometric.html) ) Where it matters most: quadratic voting and funding Sybil resistance is not an abstract nicety — it is the load-bearing assumption under quadratic voting (/wiki/dao/concepts/dao-governance-models) and quadratic funding. Quadratic schemes deliberately make additional influence from a single identity expensive (cost grows with the square of votes), which only dampens whales if each participant is one person. Without a working personhood layer, an attacker splits into many identities and the quadratic penalty evaporates entirely. This is why Gitcoin (https://www.gitcoin.co/) 's quadratic-funding rounds spend heavily on Sybil defence: undetected fake donors don't just steal matching funds, they silently break the mechanism's core fairness promise. ( Siddarth et al., "Who Watches the Watchmen?" (https://arxiv.org/abs/2008.05300) ) The hard limits No personhood system is complete, and each has an honest failure mode. Coercion and vote-selling survive proof of personhood entirely — a verified-unique human can still be paid or pressured to vote a certain way, and a market in rented votes needs no fake identities. Privacy and exclusion cut the other way: biometric and government-ID methods risk surveillance and lock out anyone unwilling or unable to enrol, while looser social methods are easier to game. And every registry faces the base-rate problem that even a small false-acceptance rate, at scale, admits thousands of duplicates. The practical consensus is that Sybil resistance is a spectrum to be raised, not a box to be checked — which is why many DAOs layer personhood scores on top of, rather than instead of, some economic stake. How Caper approaches this A caper (/wiki/foundations/what-is-a-caper) does not try to verify that each member is a unique human — it makes extra identities pointless instead. Voting weight is the product of a member's stake and their demonstrated participation (/wiki/governance/voting) , and participation is tracked by a soulbound token minted one per vote that can never be transferred or bought. A freshly created wallet therefore starts with zero participation and casts a zero-weight first vote, so spinning up extra empty identities adds nothing: each one would have to independently acquire real stake and vote, repeatedly, to earn any weight at all. The cheap half of a Sybil attack — manufacturing identities — buys no influence; the expensive half — genuine stake and repeated participation from every identity — is exactly what an honest, engaged member already does. It is a participation gate, not a proof of personhood, and it deliberately trades the egalitarian one-human-one-vote ideal for something a contract can enforce without biometrics or a trusted registry. That same earned weight also sets each member's pro-rata exit (/wiki/governance/execution) claim on the treasury. References - John R. Douceur, The Sybil Attack (https://www.microsoft.com/en-us/research/publication/the-sybil-attack/) (2002) — the founding statement of the problem. - Divya Siddarth et al., Who Watches the Watchmen? A Review of Subjective Approaches for Sybil-resistance in Proof of Personhood Protocols (https://arxiv.org/abs/2008.05300) (2020). - Vitalik Buterin, What do I think about biometric proof of personhood? (https://vitalik.eth.limo/general/2023/07/24/biometric.html) (2023). - a16z crypto, DAO governance FAQ (https://a16zcrypto.com/posts/article/governance-faq/) .