// L2 · airdrop
Linea airdrop retro
Retrospective Sybil analysis of the May 2024 Linea airdrop. Six detection methods applied to the eligible address list; 23% sybil rate confirmed against the Foundation's known-bad anchor set.
Context
Linea's Foundation published a sybil-list spreadsheet a week post-airdrop. We reproduced their results from first principles, then expanded the methodology — adding cross-chain entity linking that surfaced 41,000 additional addresses they missed.
Method
Funding-source clustering produced the largest tranche (84,000 wallets in 1,200 clusters of size ≥10). Behavioral HDBSCAN found a further 67,000 in tight clusters with median activity overlap >0.92. Graph Leiden community detection on the full transfer graph caught coordinated farming patterns invisible to per-address rules.
Defensibility
Every flagged address has an evidence payload: which methods flagged it, which clusters it sits in, and which behavioral features pushed the score. Two reversals from the appeal flow are documented in the public methodology doc.