The Vulnerability Behind Project Incentive Mechanisms: Taking Trojan as an Example

Yesterday, Trojan launched a new user incentive campaign where participating in simple tasks could earn a reward of 0.36 SOL (about $50). Sounds good, but here’s the problem—

What is the fatal flaw in the incentive design? The tasks assigned to each wallet vary greatly, and most of the protective measures are essentially ineffective. In other words, this mechanism has almost no resistance to Sybil attacks. Someone with a bit of technical knowledge can generate multiple wallets and repeatedly complete the same difficulty tasks to continuously exploit the system.

This reflects a common issue among many new projects when designing incentive mechanisms: rushing to quickly bootstrap and gather user data while neglecting basic anti-cheating logic. As a result, genuine users often don’t receive the rewards they deserve, and resources are divided among those who manipulate the system.

When launching incentive activities in the Solana ecosystem, such risks should be carefully considered.