Sybil Attack

Key points

• A Sybil attack is one in which a single actor creates many fake identities to gain disproportionate influence over a network.
• If each identity counted as a vote or a participant, an attacker could dominate decisions simply by multiplying personas.
• Crypto networks defend against this by requiring a real cost for participation, such as computational power or committed capital, which merely creating accounts cannot supply.

What is a Sybil attack?

A Sybil attack is an attempt to subvert a network by creating a large number of fake identities controlled by the same person. The name comes from a clinical case of multiple personalities. In peer-to-peer networks, where every participant in theory has a voice, an attacker pretending to be many can gain undue influence, distorting decisions, votes, or consensus itself.

How it works

The logic of the attack is simple: if influence is proportional to the number of participants, and creating participants is cheap, then all it takes is creating many. An attacker could, for example, surround a node with fake connections to isolate it from the real network, or inflate a vote with phantom identities. Without a defense, systems that treat every identity as equal remain vulnerable.

The core defense is making each participation costly in a way that cannot simply be replicated. In proof of work, influence depends on computational power, not on how many identities are created. In proof of stake, it depends on committed capital. In both cases, multiplying identities does not multiply power, because the scarce resource, not the identity, is what counts.

Outside of consensus, systems use other barriers against Sybil attacks, such as identity verification, reputation, or costs that make it harder to create accounts en masse, depending on the context.

Why it matters

The Sybil attack is a background threat to any open system that relies on counting participants. Understanding why crypto networks require a real cost for participation helps explain how they protect themselves: it is this requirement that prevents creating fake identities from translating into power over the network.

Limitations

Defenses against Sybil attacks come at a cost: proof of work consumes energy, and proof of stake requires capital, which can concentrate influence among those with more resources. Outside of consensus, requiring identity or reputation can reduce a network's openness. So protecting against Sybil attacks almost always involves a trade-off between accessibility and security, and finding that balance is part of designing any open network.