Skip to content
Methodology:
Hands-on testing, verified data, official sourcesLearn more
Security18 min readApril 8, 2026

How to Farm Airdrops Across Multiple Wallets in 2026 – Anti-Sybil Strategy

Farming airdrops across 10-50 wallets can bring in 5,000 to 50,000 USD on a single large drop – if you make it to the payout instead of getting flagged as a sybil at the snapshot. In 2024-2025 the big projects hired data analysis teams and started banning farm clusters at scale. LayerZero crossed out 800,000 wallets before the $ZRO distribution. zkSync removed half of the $ZK claimants for multi-wallet activity. Arbitrum zeroed out 279,000 addresses in 2023 because they were connected through transaction patterns.

The good news: anti-sybil at most projects follows the same template, and that template can be worked around with the right tool. The bad news: Chrome incognito and a regular VPN will not save you – they give a false sense of safety and lead straight to a mass ban. Below we explain how sybil detection actually works and what you need to do so your wallets make it to the payout.

What Is Sybil Farming and Why Projects Fight It

A sybil attack is when one person controls many wallets, making them look like independent users. For a project with a fixed airdrop budget this is a problem: a 50 million USD budget, one million people waiting. If half of them are farm clusters run by one operator, the real user gets half as much. The "real community oxygen" effect – the whole point of the drop – gets diluted.

Numbers from public reports: LayerZero in May 2024 published an analysis showing 800,000 of 6 million active addresses were classified as sybil. zkSync in June 2025 cut around 50% of claimants – 695,232 out of 1,200,000 wallets got filtered. Arbitrum in 2023 banned 279,000 wallets before the $ARB distribution, about 15% of all eligible addresses.

The common principle that works across all three projects and everyone who ran the analysis after 2023: if a group of wallets behaves similarly – same bridges, same amounts, same time intervals between transactions, shared funding sources – they all get marked as a single cluster and get 0 tokens. The exact criteria differ, but the base idea is the same.

Is this legal

Farming airdrops across multiple wallets is not illegal in any jurisdiction. It is not fraud – you are making real transactions with your own money, paying gas, taking on capital risk. The projects themselves set the conditions: they publish criteria, run long testnet periods, offer rewards for activity. The only thing that can happen is the project does not pay you tokens. That is a risk, not a crime.

Why Chrome Incognito Does Not Protect You

Most beginners think that opening a separate incognito window for each wallet makes the project see them as different users. That is flat-out wrong. Incognito only clears cookies and history – it changes none of the things projects actually use for fingerprinting.

  • Canvas fingerprint. The browser renders an invisible image via the Canvas API and sends it to an analytics script. Every combination of GPU + driver + OS gives a unique pixel result. Identical across all your wallets – instant flag.
  • WebGL vendor and renderer. The script asks the browser for the GPU model: "NVIDIA GeForce RTX 4070 Ti / ANGLE". One GPU = one fingerprint across all your wallets.
  • Audio fingerprint. The browser plays an inaudible tone through AudioContext and the script reads the signal parameters. Depends on the audio driver – also stable on one device.
  • Font fingerprint. The list of installed fonts. Every OS has its own default set, every user has extras from Office, Adobe, games.
  • Timezone, language, screen resolution, platform. All of this is sent in request headers and via JavaScript APIs. Incognito does not change any of it.

The result: two wallets in two incognito windows of the same browser are two data blobs with an identical fingerprint. Sybil analysis puts them in the same cluster within the first 50 milliseconds of the script running. Incognito only hides your history from your partner – nothing more.

The Antidetect Browser as the Base Tool

An antidetect browser is a modified Chrome that lets you create multiple profiles where each one has a unique fingerprint across every parameter on the list above. Canvas is randomised, WebGL emulates a different GPU, the audio context gives different noise, the font list is swapped. To the project, every profile looks like a separate user on a different device.

AdsPower is one of the two most popular antidetect browsers (the other is Multilogin, but that one is more expensive and aimed at teams). AdsPower has a free tier for up to two profiles – enough to try it and understand the idea. Paid starts at 9 USD per month for 10 profiles, scaling linearly from there. For serious farming across 30-50 wallets, get a monthly plan – it pays for itself on the first successful drop.

AdsPower – download the antidetect browser
Free tier for up to two profiles. Paid from 9 USD per month for 10 profiles. MetaMask, Phantom, Rabby and other crypto wallets work inside profiles. Our referral gives 10% off the first month.
AdsPower

AdsPower + ProxyS Setup Step by Step

The antidetect browser alone does not save you – it needs a unique IP. If two profiles have different canvas fingerprints but the same IP, anti-sybil catches you by IP in one second. That is why AdsPower + ProxyS is the minimum combination you need. Here is the step-by-step process for creating your first farming profile.

1

Install AdsPower

Download the client from adspower.com via our link (gets you -10% on the first month). Windows, macOS and Linux are supported. After installing, create a free account – two profiles are enough to start.

2

Buy a proxy from ProxyS

Open ProxyS and buy a pack with several static residential IPs. For farming you need one IP per profile – if you plan 10 wallets, get 10 IPs. Different countries are a plus: anti-sybil also looks at the geographic spread of a cluster, and 10 wallets spread across different countries look more natural than 10 all in the Netherlands.

3

Create your first profile in AdsPower

Click "New browser profile". In the browser settings enable randomisation for Canvas, WebGL, Audio and Fonts – all set to "random per profile". In the "Proxy" section choose type "Custom" and enter IP:port:user:pass from ProxyS. Save.

4

Check the fingerprint on browserleaks

Launch the profile and open browserleaks.com. Check: Canvas hash should be unique (compare with your normal Chrome), WebGL vendor/renderer should show a different GPU, the IP should be a European residential one with no proxy/VPN detected flags. If any item fails – go back to the profile settings and fix it.

5

Install MetaMask and import a new wallet

Inside the profile, open the Chrome Web Store and install MetaMask. Important: create a NEW seed phrase for every profile, do not import the same one into all profiles. One seed across all wallets is the main pattern anti-sybil uses to find clusters: one seed = one owner. A new seed per profile is critical.

6

Funding the wallet

And this is the most important part. Do not send money directly from your main wallet or from the exchange to all 10 farming wallets. That is where 80% of farmers fail. Better approach: use a CEX as a buffer (send from Binance to the first wallet, then from the first wallet distribute to the others through a bridge or DEX with intervals between transfers), or use a privacy alternative (Railgun, Privacy Pools). Different funding sources break up the address graph.

Seed phrase is the most common failure

One seed phrase imported into 10 profiles gives 10 MetaMasks with the same derivation path structure. Anti-sybil sees that address 0x.. on profile 1 and address 0x.. on profile 2 are HD wallets with a common root. Instant cluster. NEVER import one seed into multiple profiles – only a separate new seed per wallet.

Anti-Sybil Behaviour Strategy

Setting up the environment is only half the work. The other half is how you use the wallets. The most common patterns clusters get caught on after the fact are behavioural.

  • Different activity times. Do not launch all 10 profiles in one evening. Anti-sybil looks at activity hours – if all wallets make transactions between 20:00 and 23:00 every Friday, that is clearly one person's schedule. Spread activity over the week, use mornings / afternoons / evenings on different wallets.
  • Different transaction amounts. Do not bridge exactly 100 USD from every wallet. Use a range of 85-320 USD in odd increments. This imitates natural behaviour where different people have different budgets.
  • Different action sets. Do not run the same five actions on every wallet: swap, bridge, mint, vote, stake. Vary it: on one wallet do only swap and vote, on another bridge and mint, on a third stake and an NFT purchase. The "full quest checklist at 100% across all wallets" filter catches exactly the cookie-cutter farmers.
  • Do not transfer between your own wallets directly. If you send 0.01 ETH from farm wallet 1 to farm wallet 2, the address graph links them through that transaction forever. Even a year later, when the project pays out the drop, the analyst spots the link and the payout only goes to one of the addresses. Use a CEX buffer: farm wallet 1 → Bybit → farm wallet 2.
  • Keep logs of your actions. When the project announces the drop criteria, you will want to calculate which of your wallets qualify. Without a log you will not remember what you did on which address three months ago.
ProxyS – static residential proxies for farming
From around 1 USD per month for a single IP. For a 10-wallet farm take a 10-IP pack – different countries, different ASNs. One IP per profile, no rotation, project anti-fraud does not see any difference from a normal user.
ProxyS

Real Examples – What Worked in 2024-2025

LayerZero $ZRO in May 2024. Criteria: using the bridge across 3+ chains, volume from 500 USD, activity for at least 6 months. Farm clusters with identical amounts were wiped out. Those who stuck to the "different amounts / different times / different chains" strategy and put in 6+ months up front received on average 300-1,200 USD per wallet, with some going as high as 4,000 USD.

zkSync $ZK in June 2025. Criteria: L2 transactions, volume, bridge volume, voting. The Nansen filter was applied after the snapshot and cut 50% of claimants. Those who used AdsPower with separate profiles and unrelated seed phrases got through with an average of 7-8 wallets out of 10.

Scroll $SCR in October 2024. The easiest one, with a lighter filter. Claimants received around 400-800 USD per wallet for 2-3 months of mainnet activity. Those who farmed with linked wallets also got paid, but significantly less.

AdsPower Alternatives

Multilogin – enterprise solution, from 99 USD per month for 10 profiles. Better than AdsPower for teams: shared workspace, roles, action logs. Overkill for a solo farmer.

Dolphin Anty – popular in the CIS community, cheaper than AdsPower (15 USD per month for 10 profiles). Interface in Russian, good support. But the fingerprint protection is a bit weaker – recently caught on several projects.

GoLogin – middle of the road, 24 USD per month for 10 profiles. Runs stable, but in 2024 there were a few incidents with real IP leaking through WebRTC. Re-check through browserleaks after every update.

Bit Browser, Hidemyacc, Kameleo – less popular options. May be cheaper, but the community tests them less. Fine for experiments, risky for serious farming.

AdsPower – best price / quality balance for a solo farmer
9 USD per month for 10 profiles, proven fingerprint, active updates. If you are just starting and farming with your own capital – this is the sensible choice. Multilogin is overpay, Dolphin is a compromise on security.
AdsPower

FAQ

Farming airdrops is discipline plus tooling plus patience. None of those three parts works without the other two. If you are ready to put in 6-12 months before the first successful drop and follow the wallet separation rules – the result will come. If you want fast money and cannot be bothered to set up AdsPower – do not start, you will burn gas and nerves.

Follow active airdrops in our /airdrops section – we add new projects as they come up and filter out the scams. Fresh posts are in the Telegram channel.

CM

CoinMagnetic Team

Crypto investors since 2017. We trade with our own money and test every exchange ourselves.

Updated: April 2026