I'd like to know what's the probability of a sybil attack and if there are mechanisms built in to prevent this kind of attack?

2 Answers 2


It is impossible to say what the probability of a sybil attack is as (as far as I'm aware) there are no public data sources on how many users/nodes have been subject to sybil attacks and no reliable reporting when occurrences happen.

However, I think it is safe to say the probability of a normal user being subject to a sybil attack is pretty low as it is hard for the attacker to prevent you connecting to a single honest node and there is very little for an attacker to gain unless they have significant hash power and can compete in the mining of blocks. Without significant hash power all they can do is prevent you from receiving the latest blocks and latest transactions. There is more to gain from sybil attacking mining pools as in theory the attacker could prevent mined blocks from being propagated across the network and prevent them from receiving block reward(s).

With regards to mechanisms in say Bitcoin Core, it is impossible to identify ahead of time which peers are malicious and controlled by the same party. All nodes are treated the same on the network unless and until they start misbehaving (e.g. propagate invalid transactions, blocks). There is some ongoing work (asmap) to ensure greater diversification of peer selection through stronger bucketing. There are also various things you can do proactively as a user. If there is a node you trust you can connect to this peer manually. If you haven't been receiving blocks for a number of hours (and you have peers) you can check a block explorer (mempool.space, blockstream.info etc) to see if there have been blocks mined in this time. Although you generally shouldn't need to, doing out of band checks can give you the assurance that your node isn't subject to a sybil attack.

  • 1
    Probability is the wrong thing to ask about. Attacks don't happen randomly; they happen deliberately. The question to ask is what the attack costs, and what someone stands to gain from it (this is more a comment on the question than on the answer, just pointing out that it's inherently unanswerable). Dec 13, 2022 at 20:53
  • @PieterWuille: I agree the attack costs are highly relevant. The higher the cost the more out of reach the attack is from most potential perpetuators. I'm skeptical on trying to assess "what someone stands to gain from it". It could be anyone from a Western state actor to a rogue state actor to an altcoin advocate to just a well resourced bored hacker. If an attack is possible and affordable it could be carried out for multiple reasons. That's why I think probability factors in. If you just want to cause disruption you are going to pick the lowest hanging (most probable to succeed) fruit first Dec 14, 2022 at 8:31
  • Admittedly this isn't an exact science and you may have given this much more thought than me! But that's my current thinking anyway :) Dec 14, 2022 at 8:33

One cool thing about Bitcoin is that coins are inherently scarse and this is by itself a huge protection from sybil attacks. In other P2P systems, sybil attacks are much harder to prevent because there's no such concept of scarcity. In Bitcoin, a sybil attack would be achieved if one has lot of coins, by sending tons of transactions, and therefore spending such coins.

There are other types of sybil attacks such as overloading nodes connections, and the recent one of filling up the memory pool of specific nodes with really tiny transactions. A way to prevent these would be for example to increase the fees.

  • How does coin distribution have anything to do with a Sybil attack?
    – Claris
    Jul 14, 2015 at 19:49
  • because the transaction, which is what might be sent across the network to produce a sybil attack, represents a transfer of value and therefore cannot be simulated by a gazillion simulated peers to disrupt such network: the size of his attack is always proportional to the amount of transferable coins he owns. Jul 14, 2015 at 21:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.