LayerZero Airdrop Farming with Mobile Proxies
LayerZero Labs ran the largest Sybil filtering operation in airdrop history for its June 2024 ZRO distribution: 803,093 wallets filtered out of roughly 2.08M, with 1.28M qualified wallets receiving an airdrop valued at over $700M. With Season 2 rumored through 2026, the Sybil detection bar is set higher than ever.
This guide walks through LayerZero's exact Season 1 detection techniques, the modern Sybil-safe setup (one mobile proxy per wallet, antidetect browser, unique funding), and the specific dApps (Stargate, Radiant, Pudgy, TapiocaDAO) that actually move the allocation needle on LayerZero V2 and its 80+ chains.
What this guide covers:
Navigate This Guide
Technical reference for Sybil-safe LayerZero V2 farming, from Season 1 lessons to a production multi-wallet setup.
Reading time: ~18 minutes. Covers Season 1 outcomes, Sybil detection techniques, per-wallet infrastructure, and dApp-specific bridging strategies.
LayerZero Airdrop History
Before farming Season 2, it is essential to understand exactly what happened in Season 1. LayerZero Labs (a16z / Sequoia backed, $3B valuation Series B 2023) made airdrop history with the largest documented Sybil filtering operation, and the techniques they used are the baseline for everything in 2026.
Distribution Summary
ZRO TGE -- June 20, 2024
- 11.5% of total ZRO supply allocated to airdrop
- 1.28M wallets qualified after Sybil filtering
- $700M+ valued at TGE (launch ~$4.80)
- Proof-of-Donation claim mechanism required a small ZRO donation to Protocol Guild
- Distribution weighted by message count, chain diversity, dApp breadth, and volume
The Sybil Controversy
The largest filter in airdrop history
Out of an initial snapshot of roughly 2.08 million wallets, LayerZero Labs filtered 803,093 wallets -- approximately 38% of the snapshot -- as Sybils. The process was divided into:
- Internal analytics by LayerZero Labs, Nansen, and Chaos Labs
- Public Sybil bounty: community hunters submitted clustered wallet evidence for a share of recovered tokens
- Self-report program: 15% allocation if self-identified vs 0% if caught
- Recovered tokens added back to legitimate qualified wallets
Season 1 Timeline
The verified dates and events that shaped the largest multi-chain airdrop of 2024
LayerZero announces self-report window. Wallets that self-identify as Sybils receive 15% of their expected allocation instead of 0% if caught later.
Final Sybil filtering completed. 803,093 wallets flagged and removed from airdrop eligibility after bounty hunters submitted evidence of farm clusters.
11.5% of total ZRO supply (approximately 85.8M tokens) distributed to 1.28 million qualified wallets. Valued at $700M+ at launch price of roughly $4.80.
LayerZero required a small ZRO donation to Protocol Guild to claim. Controversial but framed as a commitment check and public-goods funding mechanism.
The Self-Report Outcome
The self-report program was polarizing. Farmers who self-reported kept 15% of their expected allocation, while those caught by bounty hunters received nothing. Post-TGE analysis by on-chain researchers suggested that self-reporters, in aggregate, walked away with real money where they otherwise would have walked away with nothing. For Season 2, expect LayerZero to repeat this mechanism: if your farming setup was sloppy, self-reporting is likely the correct play.
Season 2 Rumors & 2026 Activity
LayerZero has not officially confirmed a Season 2 as of April 2026, but several public signals strongly suggest continued farming opportunity. Here is what we know and what farmers are actually doing.
Ecosystem Expansion
LayerZero V2 now supports 80+ chains, including Solana (via LayerZero V2 Solana endpoint), Aptos, Sui, Movement, Berachain, and Abstract. Every new chain is a potential new source/destination pair that contributes to your LayerZero Scan profile.
Unclaimed Pool
A meaningful fraction of Season 1 allocations went unclaimed before the expiry window. Recovered Sybil tokens and unclaimed tokens remain in the LayerZero Foundation treasury, which historically funds follow-up distributions in protocols like Optimism and Arbitrum.
Foundation Signals
The LayerZero Foundation has publicly stated that future ZRO distributions are part of long-term tokenomics. Public comms from Bryan Pellegrino (LayerZero CEO) in late 2025 hinted at ongoing community incentives, though no firm Season 2 date has been given.
Partner Protocol Growth
Stargate V2, Radiant, Pudgy Penguins ONFT expansion, TapiocaDAO mainnet maturity, and Abracadabra MIM all use LayerZero messaging. Each generates traceable cross-chain activity that counts toward any future airdrop snapshot.
Farmer Behavior 2026
Observed in public farming threads: typical configuration is 10-100 wallets with $50-500/wallet in bridging volume. Activity is concentrated on Stargate (primary), Radiant, and newer chains (Berachain, Abstract, Movement) to capture breadth.
Detection Bar Raised
Expect Season 2 Sybil filtering to be more aggressive. Season 1 caught 38% of the snapshot; post-facto analysis tools (Nansen, Arkham, on-chain clustering) have only improved since. The Sybil-safe setup in this guide is the minimum, not a luxury.
The 2026 Farming Thesis
LayerZero Labs was funded by a16z, Sequoia, and Christie's in a Series B that closed at a $3B valuation in 2023. The foundation has both the capital and the incentive to run follow-up distributions, because sustained user activity is the core metric for LayerZero's moat against competitors like Wormhole and Hyperlane. A Season 2 airdrop (or retroactive incentive to post-Season-1 users) is the most likely mechanism to maintain that activity.
Position accordingly: start farming now with a Sybil-safe multi-wallet setup, focus volume on Stargate and Radiant, and add chain/dApp breadth over time. The farmers who show up after an official Season 2 announcement will be competing with wallets that already have 6-18 months of organic activity.
How LayerZero Detects Sybils
These are the six techniques LayerZero Labs, Nansen, and Chaos Labs used to filter 803K wallets in Season 1. Every single one is still in use. Every single one has a mitigation -- if you apply them all from the start.
Wallet Graph Clustering
Chainalysis-partner Nansen analysis traced fund flows across wallets. If 10 wallets all received initial gas from the same centralized exchange withdrawal (or a shared funder wallet), they were clustered as a Sybil farm regardless of their on-chain activity.
Mitigation: Fund each wallet from an independent source. Use different exchanges, P2P purchases, or already-aged wallets for funding. Never use one wallet to fund many farming wallets directly.
Timing Correlation
Farming scripts that bridged at identical intervals across many wallets produced detectable patterns. If 50 wallets all did Stargate bridges within the same 2-minute window, within the same block ranges, with identical amounts, they were flagged as a cluster.
Mitigation: Stagger transactions across hours or days. Introduce random delays. Vary bridge amounts per wallet. Treat each wallet as if a different human operates it on a different schedule.
Identical Gas Patterns
Many Sybil farms used the same gas price, same gas limit, and the same transaction structure across all wallets. LayerZero analytics partners surfaced wallets with byte-identical transaction envelopes as obvious automation.
Mitigation: Let each wallet use the default wallet-client gas estimation. Avoid custom scripts that set identical gas parameters. Vary transaction amounts so computed gas differs naturally.
IP Address Reuse
Exchanges and dApp front-ends log the IP address that signs each transaction. If 30 different MetaMask addresses all connect from the same datacenter IP or same residential IP, they are obviously operated by one person.
Mitigation: One dedicated mobile proxy per wallet. Mobile CGNAT IPs (T-Mobile, Vodafone, Jio) are shared with hundreds of real carrier customers, making the wallet appear as one of many legitimate mobile users.
Browser Fingerprint Match
Canvas fingerprints, WebGL renderer hashes, timezone, installed fonts, and audio context signatures are near-unique per device. Running 50 Chrome tabs with 50 MetaMask extensions from one machine produced 50 identical fingerprints.
Mitigation: Antidetect browser (Multilogin, GoLogin, AdsPower, Dolphin{anty}) generates a unique fingerprint per profile. Each wallet runs in an isolated profile with distinct canvas, WebGL, and hardware signatures.
Funding-Source Blacklist
Wallets funded directly from addresses that had previously funded confirmed Sybils were automatically blacklisted, even if the new wallet had no direct Sybil activity. LayerZero treated funding trees as transitive evidence.
Mitigation: Never reuse a funding wallet across farming batches. Rotate funding sources. Use aged wallets or fresh CEX withdrawals from different exchanges per batch.
The Four-Layer Defense Stack
No single mitigation is sufficient. Sybil-safe farming is the intersection of all four layers.
Layer 1: Network
One dedicated mobile proxy per wallet. CGNAT-shared IPs mask you among hundreds of carrier subscribers.
Layer 2: Browser
One antidetect profile per wallet. Unique canvas, WebGL, fonts, timezone, hardware concurrency per wallet.
Layer 3: Funding
Different funding source per wallet. Rotate exchanges. Age wallets for days before first dApp touch.
Layer 4: Behavior
Randomized timing, amounts, dApp choice, and chain choice. Spread across weeks, not batches.
What does NOT work
Using a VPN to farm LayerZero is insufficient -- VPN exit nodes are datacenter IPs and are actively flagged. Using one residential proxy across many wallets is insufficient -- the same IP linking many wallets is the single most reliable Sybil signal. Using regular Chrome profiles without an antidetect browser is insufficient -- canvas and WebGL fingerprints are identical across profiles on the same install. Any one layer on its own fails; only the full four-layer stack works.
Setup for Sybil-Safe Farming
A concrete per-wallet setup. Replicate this for every wallet you want to farm. Do not cut corners -- corners are what caught the 803K Sybils in Season 1.
Per-Wallet Infrastructure (Required)
1 dedicated mobile proxy (ProxyStyler 4G)
One unique IP per wallet. Stays attached to the same wallet for the entire campaign.
1 antidetect browser profile
Multilogin, GoLogin, AdsPower, or Dolphin{anty}. Unique canvas/WebGL/fonts/timezone/hardware concurrency.
1 fresh MetaMask or Rabby install
Inside the antidetect profile. Unique seed phrase per wallet. Never imported into other profiles.
1 funding source
Rotate across Binance, OKX, Kraken, Bybit, KuCoin, Coinbase. No two wallets share a funder address within two hops.
Per-Wallet Launch Sequence
Create antidetect profile
Generate unique fingerprint. Assign dedicated mobile proxy to the profile before first launch.
Install wallet
Install MetaMask or Rabby inside the profile. Generate a fresh seed. Back it up securely.
Fund wallet
Withdraw from an exchange that no other wallet in your fleet uses. Send $20-100 to start. Age 2-5 days.
First dApp interaction
Small Stargate bridge ($20-50) on a commonly-used route. Let transaction settle.
Schedule follow-ups
Add to your wallet calendar. Plan 1-3 activities per week for 2-6 months. Vary days, times, and dApps.
Scaling Cost Breakdown
Typical monthly cost per farming fleet size
| Fleet Size | Mobile Proxies | Antidetect Browser | Funding Capital | Monthly Total |
|---|---|---|---|---|
| 10 wallets (Starter) | $270/mo | $29/mo (GoLogin Solo) | $500-2K one-time | $300-320/mo ongoing |
| 30 wallets (Growth) | $810/mo | $59/mo (Dolphin{anty}) | $3K-15K one-time | $870/mo ongoing |
| 100 wallets (Serious) | $2,700/mo | $110/mo (Multilogin) | $10K-50K one-time | $2,810/mo ongoing |
* Funding capital is one-time. Most of it returns to you on closing positions (Radiant, Tapioca) or on bridging back (Stargate). Gas and bridge fees are the actual cost per wallet over the farming window: typically 3-8% of total volume.
Key dApps to Use on LayerZero V2
These six protocols drive the majority of LayerZero message volume in 2026. Season 1 allocations clearly rewarded activity on the canonical dApps (Stargate, Radiant, Pudgy ONFT), and Season 2 is expected to follow the same pattern.
Stargate Finance
Flagship LayerZero DEX, $400M+ TVL
Canonical LayerZero omnichain DEX. Bridges stablecoins and ETH across 30+ chains using LayerZero messaging. Stargate transactions are the most-tracked farming signal in the LayerZero ecosystem.
Volume target: $50-200 per wallet in total bridge volume, spread across 5-15 transactions over weeks
Chains: Ethereum, Arbitrum, Optimism, Base, Polygon, BNB Chain, Avalanche, Scroll, Linea, Mantle
Radiant Capital
Omnichain money market on LayerZero
Cross-chain lending market built on LayerZero. Deposit collateral on one chain, borrow on another. Radiant activity counts as LayerZero message usage and diversifies your on-chain history beyond pure bridging.
Volume target: $20-100 deposited and borrowed cross-chain. Hold positions for 2-4 weeks before closing.
Chains: Arbitrum (primary), BNB Chain, Ethereum, Base
Pudgy Penguins (PudgyWorld)
NFT bridging via LayerZero ONFT standard
Pudgy Penguins use LayerZero ONFT (Omnichain NFT) to move between chains. Pengu token airdrop (April 2024) rewarded cross-chain Pudgy activity. Continued ONFT bridging is a Season 2 signal.
Volume target: Own at least one Pudgy-ecosystem NFT per wallet; bridge 2-4 times across chains
Chains: Ethereum, Arbitrum, Base, Abstract, Solana (via LayerZero V2)
TapiocaDAO
Omnichain stablecoin and leverage protocol
TapiocaDAO issues USDO, an omnichain stablecoin, and offers leveraged positions across chains using LayerZero. TAP token airdrop rewarded early omnichain users. Active positions still count as LayerZero usage.
Volume target: $50-200 in USDO mint/redeem activity across 3+ chains
Chains: Ethereum, Arbitrum, Optimism, Base, Avalanche, BNB Chain
Abracadabra / MIM
MIM stablecoin uses LayerZero for cross-chain transfers
MIM (Magic Internet Money) stablecoin transfers between chains use LayerZero OFT messaging. Mint MIM on one chain, bridge to another, close the position.
Volume target: $50-150 in MIM cross-chain transfers, held for 1-3 weeks
Chains: Ethereum, Arbitrum, Avalanche, Fantom, BNB Chain
Merkly
Cross-chain mint/message aggregator
Merkly lets users send small cross-chain messages and mint ONFTs across all LayerZero-supported chains. Very cheap per-transaction. Useful for expanding chain breadth in your LayerZero Scan profile.
Volume target: 5-20 messages across different chains per wallet; low dollar volume
Chains: All 80+ LayerZero V2 chains
Allocation Formula Reverse-Engineering
LayerZero Labs never published the exact Season 1 allocation formula, but on-chain researchers fit curves to 1.28M wallet allocations. Clear positive weights: unique chain count (diminishing returns above 7-10 chains), unique dApp count (diminishing returns above 5), first-message age (older is better), total USD volume (log-scaled, diminishing returns above $1,000), total message count (log-scaled, diminishing returns above 100). Clear negative weights: Sybil-cluster probability score (binary: 0% if flagged). Optimise your wallets for breadth and age, not for volume alone.
Bridging Strategy
A tier-weighted bridging plan. Follow the Tier 1 actions religiously, fill out Tier 2 for quality, and use Tier 3 for breadth. Spread everything across 2-6 months per wallet.
| Priority | Action | Volume | Frequency | Notes |
|---|---|---|---|---|
| Tier 1 (Highest Weight) | Stargate stablecoin bridges | $50-200/wallet total | 1-3 bridges per week, varied days | Stargate is the reference dApp. 40-60% of your LayerZero activity should come from Stargate. |
| Tier 1 (Highest Weight) | Cross 5+ unique chains per wallet | n/a | Spread over 2-3 months | Season 1 rewarded chain diversity. Ethereum, Arbitrum, Optimism, Base, Avalanche, BNB, Polygon is a solid seven-chain baseline. |
| Tier 2 (Medium Weight) | Radiant deposit/borrow cycles | $20-100/wallet | 1-2 cycles per month | Holding a position for 2-4 weeks is weighted higher than flash-in-flash-out activity. |
| Tier 2 (Medium Weight) | TapiocaDAO USDO mint/redeem | $50-200/wallet | 1 cycle per month | Diversifies your message count away from Stargate-only history, which can itself look like a farm. |
| Tier 3 (Low Weight, High Breadth) | Merkly cross-chain messages | $5-20/wallet | 1-3 per week | Cheap way to expand unique chain count on LayerZero Scan. Do not rely on this alone. |
| Tier 3 (Low Weight, High Breadth) | ONFT bridge (Pudgy, other) | $10-50 NFT cost | 1-2 bridges per wallet | Own one or two inexpensive ONFTs per wallet for ecosystem signaling. |
Chain Selection
Aim for 7-10 unique chains per wallet. Start with the majors (Ethereum, Arbitrum, Optimism, Base, BNB, Avalanche, Polygon) and add newer chains (Scroll, Linea, Mantle, Berachain, Abstract, Movement) over time.
Avoid: using identical chain sequences across wallets. Wallet A: ETH to ARB to OP. Wallet B: ETH to ARB to OP. This matches the copy-paste script pattern from Season 1.
Volume per Bridge
Randomize per bridge. Do not send $100 USDC on every bridge. Target distribution: 60% of bridges in $20-75 range, 30% in $75-150 range, 10% in $150-300 range. Varies naturally per wallet.
Avoid: round numbers. $100, $200, $500 are script tells. Use $87.43, $142.18, $267.55 (generated by realistic slippage or by sending a specific token amount).
Timing Distribution
Across a 30-wallet fleet, only 2-5 wallets should be active in any given hour. Spread across time zones. Morning hours in UTC for some wallets, evening hours for others.
Avoid: batching. If all 30 wallets bridge on Saturday between 14:00 and 15:00 UTC, that is a cluster signature visible in block timestamps alone.
Tool Stack
Every farmer running a Sybil-safe fleet uses a variation of this stack. The specific vendors are interchangeable; the categories are not.
Mobile Proxy (per wallet)
ProxyStyler 4G dedicated
Each wallet needs a unique IP that looks like a real carrier subscriber. CGNAT-shared mobile IPs cannot be cheaply blocked, so LayerZero analytics cannot group wallets by IP.
Cost: From $27/month per IP
Antidetect Browser
Multilogin, GoLogin, AdsPower, Dolphin{anty}
Each profile generates unique canvas, WebGL, fonts, timezone, and hardware fingerprints. Paired with one proxy per profile, each wallet appears to live on a different device and network.
Cost: $29-110/month (5-100 profiles)
Wallet
MetaMask or Rabby per profile
Fresh wallet install inside each antidetect profile. Seed phrases never overlap across profiles. Import different seeds per profile to avoid local-storage leakage.
Cost: Free
Funding
Mix of CEX withdrawals + P2P
Different funding source per wallet breaks wallet-graph clustering. Ideally alternate between Binance, OKX, Kraken, and Bybit withdrawals, and age wallets with $5-20 for a few days before first activity.
Cost: Gas + bridge fees per wallet
LayerZero Scan
layerzeroscan.com
Public explorer for LayerZero cross-chain messages. Check each wallet's message count, unique source/destination chains, and dApp breakdown. Use it as your farming dashboard.
Cost: Free
Transaction Orchestration
Manual or carefully staggered scripts
Heavy automation is the #1 Sybil signal. If you script, introduce large random delays, random amounts, random dApp choice, and randomized times of day across wallets.
Cost: n/a
Why ProxyStyler Mobile Proxies for LayerZero Farming
Dedicated device per IP
No IP sharing with other customers. The IP attached to your wallet stays yours for the life of the lease.
CGNAT-shared carrier ranges
T-Mobile, AT&T, Vodafone, Three, Orange, and other carriers all share public IPs among real mobile subscribers (RFC 6598). Your wallet looks like one of many.
30+ country selection
Choose IP geography per wallet. Distribute wallets across US, EU, UK, Asia for geographic diversity.
HTTP and SOCKS5 both supported
Antidetect browsers and MetaMask work with both. SOCKS5 provides full protocol tunneling for any wallet edge case.
API-driven IP rotation
Force a new IP on demand via API when you want a fresh carrier identity. Useful for cleanup after a suspected flag.
Unlimited bandwidth
No per-GB billing. Farming generates more than typical scraping; unlimited means no surprise costs.
6 Mistakes That Burn Farming Wallets
These are the exact patterns that filtered 803K wallets in Season 1. Every single one was preventable. Check your setup against each before your next bridge.
Using one IP across many wallets
Why it flags: LayerZero, dApp front-ends, and exchanges log the IP that originates each signature. 20+ wallets signing from one residential or datacenter IP is the easiest cluster to surface, and it is what caught the majority of Season 1 Sybils.
Fix: Assign one dedicated mobile proxy per wallet. Keep that proxy glued to that wallet for the life of the campaign. Never mix.
Funding all wallets from one source
Why it flags: Wallet graph analysis (Nansen, Arkham, Chainalysis) starts at the funding wallet and expands outward. If 50 wallets all trace back to the same funder, they cluster as one Sybil farm instantly.
Fix: Rotate exchanges per wallet (Binance, OKX, Kraken, Bybit, KuCoin, Coinbase). Consider P2P purchases, DEX swaps from aged wallets, or already-funded cold wallets as the first hop.
Copy-paste transaction timing
Why it flags: A farming script that loops through wallets and bridges each in 20-second intervals creates a unique timing pattern that LayerZero's timing-correlation pass detects trivially.
Fix: Stagger across days and time zones. Vary amounts. Alternate which dApp each wallet touches first. Make the fleet look like 50 different humans, not one script.
Identical bridge amounts across wallets
Why it flags: Bridging exactly $100 of USDC from 30 wallets in the same week is statistically impossible for unrelated users. Season 1 Sybil bounty hunters filed reports with screenshots of these patterns.
Fix: Randomize amounts per wallet ($47, $112, $83, $156). Vary token (USDC, USDT, DAI, ETH). Vary source and destination chain choice.
Skipping the antidetect browser
Why it flags: Running multiple MetaMask instances from one browser install exposes identical canvas, WebGL, hardware, and timezone fingerprints. Even if IPs differ, browser fingerprint matches link wallets.
Fix: One antidetect profile per wallet. Multilogin/GoLogin/AdsPower/Dolphin{anty} rotate the fingerprint per profile. Pair each profile with its matching mobile proxy.
Not self-reporting if caught
Why it flags: LayerZero Season 1 offered 15% of expected allocation for self-reported Sybils vs 0% for those caught by bounty hunters. Several public threads showed farmers who self-reported kept a meaningful share.
Fix: If your setup was sloppy and you know you will be flagged, self-report before the deadline of any future season. 15% of a real allocation is better than 0%.
// Premium Mobile Proxy Pricing
Configure & Buy Mobile Proxies
Select from 10+ countries with real mobile carrier IPs and flexible billing options
// billing-period
Select the billing cycle that works best for you
Available regions:
selected config
ONLINE🇺🇸USA Configuration
AT&T • Florida • Monthly Plan
Your price:
No commitment • Cancel anytime • Purchase guide
Popular Proxy Locations
Secure payment methods accepted: Credit Card, PayPal, Bitcoin, and more. 2 free modem replacements per 24h.
Beyond LayerZero: Other Airdrop & Crypto Proxy Use Cases
The same mobile proxy + antidetect browser stack that protects LayerZero farming also applies to every other airdrop campaign and multi-account crypto workflow.
Other Airdrop Campaigns
- Solana ecosystem airdrops (Jupiter, Jito, Kamino)
- Arbitrum STIP round continuation grants
- Optimism RetroPGF and ongoing OP distributions
- Berachain, Monad, Abstract mainnet launch campaigns
- Movement, Monad, HyperLiquid active campaigns
Crypto Multi-Account Workflows
- Exchange account KYC separation
- Launchpad and IDO participation across multiple accounts
- NFT mint allowlist farming
- DeFi leverage trading across isolated wallets
- Crypto mobile proxy plans built for this workflow
Related Technical Guides
- Browser fingerprint detection guide for antidetect setup
- 10 antidetect browser mistakes that break fingerprint isolation
- GoLogin review for multi-profile management
- Mobile proxies for antidetect browsers
Geographic Coverage for Farming
Distribute wallets across country IPs for natural geographic diversity:
Start Farming LayerZero Sybil-Safe
Dedicated 4G/5G mobile proxies -- one per wallet, CGNAT-shared carrier IPs, 30+ countries. Break wallet-graph clustering before LayerZero Season 2 snapshot.
Compatible with Multilogin, GoLogin, AdsPower, Dolphin{anty}, MetaMask, Rabby. HTTP and SOCKS5 support. Unlimited bandwidth, no per-GB billing, API-driven IP rotation.
- Q01What happened with the LayerZero Season 1 airdrop?
- LayerZero completed its ZRO TGE on June 20, 2024, distributing 11.5% of total supply (approximately 85.8 million tokens) to 1.28 million qualified wallets. The airdrop was valued at over $700 million at launch price (ZRO around $4.80). Before distribution, LayerZero ran the largest Sybil filtering operation in airdrop history: 803,093 wallets, roughly 38% of the original snapshot, were flagged and removed. Filtering combined internal analytics, Chaos Labs, and Nansen clustering, plus a public Sybil bounty where community members submitted evidence of farm clusters for a share of recovered tokens. A self-report program also ran: wallets that self-identified as Sybils received 15% of their expected allocation instead of 0% if caught by the bounty.
- Q02Is there a LayerZero Season 2 airdrop in 2026?
- As of April 2026, LayerZero Labs has not officially confirmed a Season 2 airdrop, but multiple public signals point to continued farming opportunity: (1) LayerZero Foundation publicly stated that additional ZRO distributions are part of long-term tokenomics, (2) ecosystem growth continues with 80+ chains now supported on LayerZero V2, (3) new partner protocols (Stargate V2, Radiant, Pudgy ONFT expansion, TapiocaDAO, Abracadabra) continue to drive cross-chain message volume, (4) unclaimed Season 1 tokens and recovered Sybil tokens remain in the foundation for future incentives. Historical precedent from other projects (Optimism, Arbitrum, Jito) shows that protocols with large unclaimed pools run follow-up distributions. Farming behavior in 2026 is positioning for a rumored Season 2, with an expected 10-100 wallet range per farmer and $50-500 in bridging volume per wallet.
- Q03How did LayerZero actually detect Sybils in Season 1?
- Four core techniques, confirmed in the LayerZero Labs post-airdrop transparency reports: (1) Wallet graph clustering, performed with Nansen and Chaos Labs. Analysts traced initial funding flows across wallets and grouped wallets sharing funding sources, even multiple hops deep, into Sybil clusters. (2) Timing correlation: wallets that bridged within narrow time windows of each other, especially with identical intervals between transactions, were flagged as scripted farms. (3) Identical gas patterns: farming scripts often set the same gas price, gas limit, and nonce behavior across wallets, producing byte-identical transaction envelopes visible in mempool data. (4) IP and browser fingerprint correlation, via dApp front-end telemetry and exchange withdrawal logs. Wallets signing from the same IP or sharing canvas/WebGL fingerprints were grouped. The combination of these techniques filtered 803K wallets, roughly 38% of the original 2.08M snapshot.
- Q04Why do I need a separate mobile proxy per wallet?
- Three reasons, all documented from Season 1 outcomes: (1) IP address logging is universal. MetaMask, WalletConnect, exchange front-ends, LayerZero Scan, and every major dApp log the IP address of every signature and API call. If 20 wallets connect from the same IP, that IP becomes a cluster key. (2) Datacenter and residential IPs are easily attributed. A single residential or datacenter IP shared across wallets is the single most reliable Sybil signal. (3) Mobile CGNAT IPs are the only class that cannot be cheaply blocked. Mobile carriers (T-Mobile, AT&T, Vodafone, Jio) share one public IPv4 among 50-1,000+ real subscribers under RFC 6598, so a mobile IP looks like one of many real carrier customers. Using one dedicated ProxyStyler mobile proxy per wallet breaks the IP clustering attack entirely. Cost is $27+/month per IP, which is minimal compared to the potential ZRO allocation per wallet.
- Q05Which dApps should I use on LayerZero V2?
- Priority order based on message weight, ecosystem centrality, and observed Season 1 allocation patterns: (1) Stargate Finance is the canonical LayerZero DEX and should represent 40-60% of each wallet's activity. Bridge stablecoins and ETH across 5-10 chains with $50-200 total volume per wallet. (2) Radiant Capital provides cross-chain lending; depositing $20-100 of collateral and borrowing across chains gives you non-bridge LayerZero activity that farms view as higher quality. (3) TapiocaDAO offers USDO omnichain stablecoin activity that diversifies your message history. (4) Pudgy Penguins ONFT bridging uses the LayerZero ONFT standard; owning at least one Pudgy-ecosystem NFT per wallet adds NFT message weight. (5) Abracadabra (MIM) and Merkly round out the ecosystem breadth. The goal is to make each wallet look like an organic cross-chain DeFi user, not a single-dApp farmer.
- Q06How many wallets and how much volume should I farm?
- Typical Season 2 farmer configuration observed in public farming threads and Discord communities in 2026: 10-100 wallets per person, $50-500 in bridging volume per wallet. At the low end (10 wallets, $50/wallet), total capital required is around $500 plus gas. At the high end (100 wallets, $500/wallet), you are running a $50,000+ operation that requires significant infrastructure: 100 antidetect profiles, 100 mobile proxies, 100 funding sources, and weeks of staggered activity. The sweet spot for most farmers is 20-30 wallets with $100-200 each. Beyond ~50 wallets, the operational complexity of avoiding Sybil detection grows faster than the expected airdrop per wallet. LayerZero Season 1 allocation curve was roughly flat per-wallet above a moderate activity threshold, so farming 100 lightly-used wallets is strictly worse than 20 well-diversified ones.
- Q07Is LayerZero airdrop farming legal?
- Airdrop farming itself is not illegal in most jurisdictions. You are interacting with publicly available smart contracts using your own funds. However, there are several legal considerations. (1) Tax: airdrop receipts are typically taxable income at fair market value on the date of receipt in the US, UK, EU, and Australia. Keep records. (2) Sanctions: using LayerZero from sanctioned jurisdictions (OFAC-listed countries) violates US law regardless of airdrop farming. (3) Terms of service: some dApp front-ends prohibit multiple accounts per person; violating these terms is typically a civil matter, not criminal. (4) Self-reporting to LayerZero as a Sybil is a choice between 0% and 15% allocation, not a legal requirement. (5) In certain jurisdictions (e.g., discussions in the EU MiCA framework), aggressive farming could be reclassified if regulators view it as market manipulation, but no enforcement action on airdrop farming specifically has occurred as of April 2026. Consult local counsel for large operations.
- Q08What is the difference between an antidetect browser and regular Chrome profiles?
- Regular Chrome profiles (the "People" feature) isolate bookmarks, history, and extensions, but they share the same browser fingerprint with the underlying Chrome install. Canvas hashes, WebGL renderer, installed fonts, audio context, timezone, and hardware concurrency are all identical across profiles on the same machine. A website querying these signals sees the same fingerprint no matter which profile you use. Antidetect browsers (Multilogin, GoLogin, AdsPower, Dolphin{anty}) generate a unique synthetic fingerprint for each profile: different canvas output, different WebGL renderer string, different fonts, different audio signature, different hardware concurrency, and different timezone if desired. Combined with one mobile proxy per profile, each profile looks like a different physical device on a different network. For LayerZero farming, antidetect browsers are the mandatory layer that breaks browser-fingerprint correlation. Expect to pay $29-110/month depending on the number of profiles.
- Q09What is LayerZero Scan and why does it matter for farming?
- LayerZero Scan (layerzeroscan.com) is the official public explorer for LayerZero cross-chain messages. For each wallet, it displays: (1) total message count, (2) unique source chains used, (3) unique destination chains used, (4) breakdown by dApp (Stargate, Radiant, Pudgy, etc.), (5) first and last message timestamps, (6) timeline of activity. For farmers, it is the primary dashboard: check each of your wallets to confirm you have diverse chain coverage, sufficient message count, and activity spread across many dApps. Season 1 allocation formula was not published in full detail, but reverse-engineering of actual allocations showed clear weight on (a) unique chain count, (b) dApp diversity, (c) total USD volume, and (d) activity duration (older first-message dates performed better). Before the next snapshot, audit each wallet on LayerZero Scan and close gaps: add chains, add dApps, increase volume where light.
- Q10How often should I farm each wallet to look organic?
- The goal is to look like a moderately active DeFi user, which empirically means 1-3 cross-chain actions per week with large variance. Concrete cadence for a well-run wallet: (1) Week 1: one Stargate bridge of a mid-size stablecoin amount. (2) Week 2: one Radiant deposit or one USDO mint on TapiocaDAO. (3) Week 3: a second Stargate bridge, different source/destination chains. (4) Week 4: a Merkly cross-chain message and a Radiant borrow. Then repeat the cycle for 2-6 months. Large farmers stagger across wallets so that at any given time, only 2-5 wallets in a 30-wallet fleet are active, making the fleet look like independent users with different schedules. Never hit all wallets in the same hour. Never copy-paste amounts. Never use the same RPC node for every signature. Randomness and patience are the two most effective anti-Sybil defenses after mobile proxies and antidetect browsers.
Related
Launch Playbook
/blog/start-mobile-proxy-reseller-business-2026
Bulk Pricing Math
/blog/mobile-proxy-bulk-pricing-volume-tiers
MobileProxy.space
/blog/mobileproxy-space-alternative
Localtonet
/blog/localtonet-alternative
LuxSocks (closed)
/blog/luxsocks-alternative
Pingproxies
/blog/pingproxies-alternative