Threat Landscape in Decentralized Systems: Sybil Attacks, Related Vulnerabilities, and Blockchain Security Evolution (2015–2025)
Source abstract
Abstract
Blockchain technology has profoundly revolutionized decentralized applications across financial systems, global supply chains, and applied informatics. However, it remains susceptible to systemic security hazards. This systematic review comprehensively evaluates core architectural vulnerabilities within blockchain infrastructures, consensus mechanisms, and peer-to-peer (P2P) network layers spanning the decade from 2015 to 2025. We focus primarily on the mechanics, operational taxonomy, and evolutionary trajectories of Sybil attacks, wherein malicious actors forge multiple pseudonymous identities to gain disproportionate systemic influence. By synthesizing the foundational academic literature with real-world empirical case studies, such as automated airdrop farming exploits in Layer-2 ecosystems (e.g., Arbitrum, zkSync) and decentralized finance (DeFi) governance manipulations, we analyze attack mechanisms, quantifiable impacts, and mitigation vectors. Our findings chart the structural evolution of Sybil strategies from rudimentary P2P routing disruptions to complex, economically driven application-layer interventions. Finally, we evaluate contemporary defenses, such as Proof-of-Personhood (PoP) systems and zero-knowledge (ZK) cryptography, offering actionable recommendations for the integration of W3C-compliant decentralized identity (DID) frameworks and behavioral analytics to enhance systemic fault tolerance.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Blockchain Technology Applications and Security · Information and Cyber Security · Organizational and Employee Performance
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computers and Information Technology, Politehnica University of Timisoara, 2 V. Parvan Blvd, 300006 Timisoara, Romania
Department of Computers and Information Technology, Faculty of Electrical Engineering and Information Technology, University of Oradea, 410087 Oradea, Romania
Funding
University of Oradea · UPT Timișoara
References (32)
Show source-provided references
1. Nakamoto, S. (2026, April 20). Bitcoin: A Peer-to-Peer Electronic Cash System. Available online: https://bitcoin.org/bitcoin.pdf.
2. Buterin, V. (2026, April 20). Ethereum Whitepaper. Available online: https://ethereum.org/content/whitepaper/whitepaper-pdf/Ethereum_Whitepaper_-_Buterin_2014.pdf.
3. Douceur, J.R. (2026, April 20). The Sybil Attack. IPTPS. Available online: https://www.freehaven.net/anonbib/cache/sybil.pdf.
4. Gervais, A., Karame, G.O., Wüst, K., Glykantzis, V., Ritzdorf, H., and Capkun, S. (2016, January 24–28). On the Security and Performance of PoW Blockchains. Proceedings of the CCS’16: 2016 ACM SIGSAC Conference on Computer and Communications Security, Vienna, Austria.10.1145/2976749.2978341 ↗
5. Eyal, I., and Sirer, E.G. (2026, April 20). Majority Is Not Enough. FC. Available online: https://arxiv.org/pdf/1311.0243.pdf.
6. Heilman, E., Kendler, A., Zohar, A., and Goldberg, S. (2026, April 20). Eclipse Attacks on Bitcoin’s Peer-to-Peer Network. USENIX Security. Available online: https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-heilman.pdf.
7. A survey of distributed consensus protocols for blockchain networks10.1109/COMST.2020.2969706 ↗
8. Qin, K., Zhou, L., Livshits, B., and Gervais, A. (2026, April 20). Attacking the DeFi Ecosystem with Flash Loans. Available online: https://arxiv.org/pdf/2003.03810.pdf.
9. (2026, April 20). Arbitrum Airdrop Sybil Analyses. Available online: https://dune.com.
10. (2026, April 20). Nansen Arbitrum Report. Available online: https://www.nansen.ai.
11. (2026, April 20). zkSync/Optimism/Base Airdrop Retrospectives (2024–2025 Reports). 2024. Official Project Blogs or Analytics Platforms. Available online: https://zksync.io.
12. (2026, April 20). Retrospective Airdrop Clustering Studies (2025–2026). 2025. Aggregated in Analytics Reports from Nansen, Bubblemaps, or TrustaLabs. Available online: https://bubblemaps.io.
13. Liu, Z., and Li, X. (2026, April 20). SoK: Security Analysis of Blockchain-based Cryptocurrency (165 Incidents). Available online: https://arxiv.org/html/2503.22156v1.10.55092/blockchain20260001 ↗
14. (2026, April 20). Digitap/FinanceFeeds. Proof-of-Personhood in 2025 & Beyond. Available online: https://financefeeds.com/proof-of-personhood-how-it-is-solving-sybil-attacks-in-2025-beyond/.
15. (2026, April 20). Polkadot Proof-of-Personhood/Individuality System (2025–2026). Available online: https://www.proofofpersonhood.how/.
16. (2026, April 20). World.org (2025–2026). World ID: Proof-of-Personhood with Iris Biometrics and ZKPs. Available online: https://world.org/world-id.
17. (2026, April 20). W3C DID v1.0/VC Data Model v2.0 + Hybrid DID Literature (2024–2025). Available online: https://www.w3.org/TR/vc-data-model-2.0/.
18. (2026, April 20). Recent Ethereum P2P Eclipse Variants (2025–2026). Available online: https://arxiv.org/abs/2601.16560.
19. Platt, M., and McBurney, P. (2026, April 20). Sybil in the Haystack. Algorithms. Available online: https://www.mdpi.com/1999-4893/16/1/34.10.3390/a16010034 ↗
20. (2026, April 20). Ethereum Staking Reports (ChainLabo/Bitget, 2026). Available online: https://ethereum.org/staking/#further.
21. (2026, April 20). Selfish Mining Extensions. Available online: https://arxiv.org/abs/2502.20360.
22. Eyal, I. (2015). The Miner’s Dilemma. IEEE S&P. Proceedings of the 2015 IEEE Symposium on Security and Privacy, San Jose, CA, USA, 17–21 May 2015, IEEE.10.1109/SP.2015.13 ↗
23. (2026, April 20). Monero Publish-or-Perish Mitigations. Available online: https://github.com/monero-project/research-lab/issues/144.
24. (2026, April 20). Proof of Humanity/Kleros (2025 Updates). Available online: https://www.proofofhumanity.id/.
25. (2026, April 20). TrustaLabs Airdrop-Sybil-Identification Framework; Nansen Linea Report. 2025. TrustaLabs GitHub/Framework, Nansen. Available online: https://github.com/TrustaLabs/Airdrop-Sybil-Identification.
26. (2026, April 20). Humanity Protocol Documentation (2025–2026). Available online: https://docs.humanity.org/whitepaper.
27. Yu, H.F., Kaminsky, M., Gibbons, P.B., and Flaxman, A. (2026, April 20). SybilGuard/SybilLimit/SybilRank Series. Available online: https://www.cs.columbia.edu/~danr/6772/papers/sybil.pdf.
28. (2026, April 20). BrightID Documentation (2025–2026). Available online: https://www.brightid.org/.
29. (2026, April 20). Graph-Based Defense Limitations (2025 Surveys). Available online: https://arxiv.org/html/2509.19539v1.
30. (2026, April 20). Polygon ID (2025–2026). Available online: https://polygon.technology/blog/introducing-polygon-id-zero-knowledge-own-your-identity-for-web3.
31. Liu, Q., Huang, Q., Fan, F., Wu, H., and Tang, X. (2025, January 2–6). Detecting Sybil Addresses in Blockchain Airdrops: A Subgraph-based Feature Propagation and Fusion Approach. Proceedings of the IEEE ICBC 2025: IEEE International Conference on Blockchain and Cryptocurrency 2025 Conference, Pisa, Italy.10.1109/ICBC64466.2025.11185061 ↗
32. (2026, April 20). Polkadot PoP + Hybrid Approaches. Available online: https://wiki.polkadot.com/learn/learn-identity/.