// public sandbox · real alchemy ingestion · model v0.5.0-gov-expanded · status
SYBILSHIELD

// for defi protocols

Stop bleeding rewards to wallet farms.

Score every deposit, swap, or LP add in real time. Webhook fires when a wallet scores ≥70 — escrow the reward, hold for review, save 3-15% of your incentive budget.

8-15%
of farming rewards typically leak to coordinators
<200ms
p95 score latency at the /v1/score endpoint
real-time
webhook on every deposit if you want it
auditable
every escrow decision has evidence attached

Which detection methods matter here

Funding clustering

Farms split capital from a single funder across 100s of wallets — the canonical pattern, highest yield method.

Behavioral HDBSCAN

Wallets that execute the exact same action sequence (deposit, claim, withdraw) within milliseconds of each other.

Temporal correlation

Bot-coordinated deposits across many wallets fire on the same block height — easy to catch in bulk.

ML ensemble

Combines the above into a single score so your webhook handler can do a single comparison.

// mini case study

DeFi protocol: $1.8M saved from 380-wallet farm

A yield-farming protocol with per-wallet reward caps wired /v1/score into its deposit webhook. Over 90 days we attributed 380 freshly-funded wallets to a single coordinator. Rewards escrowed, redistributed to legitimate LPs after a 14-day appeal window.

See more case studies →

Free & open

Free public sandbox

Free

Score farming rings with the full evidence pipeline at no cost. Running continuous, high-volume scoring? Email us for research access.

Start free →