{
 "@context": "https://schema.org",
 "@type": "DefinedTerm",
 "@id": "https://wulfkaal.github.io/entities/sockpuppet-attack",
 "identifier": "kaal:entity:sockpuppet-attack",
 "name": "Sockpuppet attack",
 "termCode": "sockpuppet-attack",
 "inDefinedTermSet": {
  "@id": "https://wulfkaal.github.io/entities/index.json"
 },
 "author": {
  "@type": "Person",
  "name": "Wulf A. Kaal",
  "identifier": "https://orcid.org/0000-0003-0757-275X"
 },
 "dateModified": "2026-07-29",
 "canonicalForm": "https://wulfkaal.github.io/entities/sockpuppet-attack.md",
 "sha256": "8d81f180babfcadab43285cce28aa209ecbec7d6b4c0304b7f5685c8dd284543",
 "additionalProperty": [
  {
   "@type": "PropertyValue",
   "name": "status",
   "value": "derived"
  },
  {
   "@type": "PropertyValue",
   "name": "claim_count",
   "value": 10
  },
  {
   "@type": "PropertyValue",
   "name": "work_count",
   "value": 3
  },
  {
   "@type": "PropertyValue",
   "name": "year_span",
   "value": [
    "2021",
    "2021"
   ]
  },
  {
   "@type": "PropertyValue",
   "name": "non_current_claims",
   "value": 0
  }
 ],
 "subjectOf": [
  {
   "@type": "Claim",
   "@id": "https://wulfkaal.github.io/claims/3782203-035",
   "identifier": "kaal:claim:3782203-035",
   "text": "A DAO permitting anonymous membership is exposed to a sockpuppet attack in which one account behaves honestly while another cheats, and if the cheating account can funnel its gains to the honest account without detection or punishment the system is set up for failure.",
   "abstract": "One strategy is to have one account which acts honestly and one which cheats. If the cheating account can funnel the gains to the honest account, without detection or punishment, this sets the system up for failure.",
   "citation": "Craig Calcaterra, Wulf A. Kaal, A Technical Perspective on Decentralization (2021). SSRN: https://ssrn.com/abstract=3782203",
   "datePublished": "2021",
   "claim_type": "failure",
   "confidence": "argued",
   "is_failure_mode": true,
   "scope_conditions": [
    "anonymous DAOs allowing multiple accounts per person"
   ],
   "source_pdf_sha256": "ab8a22d0dbb026a09212a4c85963f3c05787cf80775e8613ae3724e3883e7a56",
   "status": "current"
  },
  {
   "@type": "Claim",
   "@id": "https://wulfkaal.github.io/claims/3782203-036",
   "identifier": "kaal:claim:3782203-036",
   "text": "Paying contributors in reputation tokens rather than fees, and then distributing all fees as a periodic reputation weighted salary, defeats the sockpuppet attack because splitting a holding across many accounts yields exactly the same share of fees.",
   "abstract": "A periodic reputation-weighted salary will distribute all fees the DAO earns to all members. Individuals who perform tasks that bring fees to the DAO will be rewarded with reputation tokens, not the fees. Members who own more reputation tokens share in a larger percentage of the fees.",
   "citation": "Craig Calcaterra, Wulf A. Kaal, A Technical Perspective on Decentralization (2021). SSRN: https://ssrn.com/abstract=3782203",
   "datePublished": "2021",
   "claim_type": "design",
   "confidence": "argued",
   "is_failure_mode": false,
   "scope_conditions": [
    "anonymous DAOs with multiple accounts per member",
    "all DAO fees pooled and shared"
   ],
   "source_pdf_sha256": "ab8a22d0dbb026a09212a4c85963f3c05787cf80775e8613ae3724e3883e7a56",
   "status": "current"
  },
  {
   "@type": "Claim",
   "@id": "https://wulfkaal.github.io/claims/3782210-008",
   "identifier": "kaal:claim:3782210-008",
   "text": "A Web of Trust style reputation ledger, in which each party rates each transaction and reputation is summed with weightings by rater reputation, will have all of its value drained by the sockpuppet attack, because an attacker can build reputation through transactions between their own fake accounts and then use it to cheat.",
   "abstract": "Unfortunately, the sockpuppet attack will suck all value from the network. Setting up fake accounts, an attacker can build their reputation by making transactions be- tween their own accounts. Once their reputation is sufficiently large to trick a mem- ber, they can use it to cheat the system.",
   "citation": "Craig Calcaterra, Wulf A. Kaal, The Importance of Reputation for the Evolution of Decentralization (2021). SSRN: https://ssrn.com/abstract=3782210",
   "datePublished": "2021",
   "claim_type": "failure",
   "confidence": "argued",
   "is_failure_mode": true,
   "scope_conditions": [
    "open networks that permit account creation",
    "self-reported transaction ratings"
   ],
   "source_pdf_sha256": "9cc531ab239f6266c8aeddcc8e54f4c06029c44e825444bee137bbcc0c9d0a8e",
   "status": "current"
  },
  {
   "@type": "Claim",
   "@id": "https://wulfkaal.github.io/claims/3782210-009",
   "identifier": "kaal:claim:3782210-009",
   "text": "Charging transaction fees or imposing KYC identity protocols does not solve the sockpuppet problem: such defenses push the cost of defending the network onto users, and the defense cost equals what it is worth to break the defense while being multiplied across every transaction with every member.",
   "abstract": "This doesn't help. Such defenses push the cost of defending the network onto the users. The cost to defend it is exactly as much as it is worth to break the defense, except it's multiplied on every transaction with every member in the system.",
   "citation": "Craig Calcaterra, Wulf A. Kaal, The Importance of Reputation for the Evolution of Decentralization (2021). SSRN: https://ssrn.com/abstract=3782210",
   "datePublished": "2021",
   "claim_type": "failure",
   "confidence": "argued",
   "is_failure_mode": true,
   "scope_conditions": [
    "defenses that tax ordinary transactions",
    "attacker gain from faked reputation exceeds the cost of faking it"
   ],
   "source_pdf_sha256": "9cc531ab239f6266c8aeddcc8e54f4c06029c44e825444bee137bbcc0c9d0a8e",
   "status": "current"
  },
  {
   "@type": "Claim",
   "@id": "https://wulfkaal.github.io/claims/3782210-018",
   "identifier": "kaal:claim:3782210-018",
   "text": "Distributing salary equitably, for example equally to all members, is self-defeating: the obvious gaming strategy becomes creating multiple accounts and distributing one's work between them, which is why the salary must be reputation-weighted.",
   "abstract": "If salary is distributed more equitably, say equally to all members, then the obvious strategy for gaming the system is to create multiple accounts and distribute your work between the accounts.",
   "citation": "Craig Calcaterra, Wulf A. Kaal, The Importance of Reputation for the Evolution of Decentralization (2021). SSRN: https://ssrn.com/abstract=3782210",
   "datePublished": "2021",
   "claim_type": "failure",
   "confidence": "argued",
   "is_failure_mode": true,
   "scope_conditions": [
    "open membership systems where accounts are cheap to create"
   ],
   "source_pdf_sha256": "9cc531ab239f6266c8aeddcc8e54f4c06029c44e825444bee137bbcc0c9d0a8e",
   "status": "current"
  },
  {
   "@type": "Claim",
   "@id": "https://wulfkaal.github.io/claims/3782210-025",
   "identifier": "kaal:claim:3782210-025",
   "text": "Sockpuppet attacks are inevitable in any organization that wants open membership and anonymous members, and since those properties are essential to the autonomy that makes a global decentralized organization efficient, reputation must be weighted every time it is used.",
   "abstract": "Sockpuppet attacks are inevitable if you want the membership to be open and to allow anonymous members. These properties are essential for fostering the individual autonomy that makes a global decentralized organization efficient and powerful.",
   "citation": "Craig Calcaterra, Wulf A. Kaal, The Importance of Reputation for the Evolution of Decentralization (2021). SSRN: https://ssrn.com/abstract=3782210",
   "datePublished": "2021",
   "claim_type": "condition",
   "confidence": "argued",
   "is_failure_mode": true,
   "scope_conditions": [
    "open membership",
    "anonymous or pseudonymous members"
   ],
   "source_pdf_sha256": "9cc531ab239f6266c8aeddcc8e54f4c06029c44e825444bee137bbcc0c9d0a8e",
   "status": "current"
  },
  {
   "@type": "Claim",
   "@id": "https://wulfkaal.github.io/claims/3782210-026",
   "identifier": "kaal:claim:3782210-026",
   "text": "Every single reputational implementation the authors have audited in the blockchain DAO space carries the flaw of vulnerability to the sockpuppet attack on the Web of Trust model.",
   "abstract": "This is the flaw in every single reputational implementation we've audited in the blockchain DAO",
   "citation": "Craig Calcaterra, Wulf A. Kaal, The Importance of Reputation for the Evolution of Decentralization (2021). SSRN: https://ssrn.com/abstract=3782210",
   "datePublished": "2021",
   "claim_type": "empirical",
   "confidence": "evidenced",
   "is_failure_mode": true,
   "scope_conditions": [
    "blockchain DAO reputation systems audited by the authors as of writing"
   ],
   "source_pdf_sha256": "9cc531ab239f6266c8aeddcc8e54f4c06029c44e825444bee137bbcc0c9d0a8e",
   "status": "current"
  },
  {
   "@type": "Claim",
   "@id": "https://wulfkaal.github.io/claims/3782210-027",
   "identifier": "kaal:claim:3782210-027",
   "text": "SingularityNet's reputation system, which tracks self-reported transaction quality, transaction value, duration of satisfaction, and prior reputation weights, will have its value eroded by the sockpuppet attack once the system becomes valuable enough to merit attack, because it does not implement the other necessities.",
   "abstract": "Without implementing the other necessities, the sockpuppet attack will eventually erode their value, once it becomes valuable enough to merit the attack.",
   "citation": "Craig Calcaterra, Wulf A. Kaal, The Importance of Reputation for the Evolution of Decentralization (2021). SSRN: https://ssrn.com/abstract=3782210",
   "datePublished": "2021",
   "claim_type": "failure",
   "confidence": "evidenced",
   "is_failure_mode": true,
   "scope_conditions": [
    "systems implementing only a subset of the seven necessities",
    "once the reputation becomes valuable enough to merit attack"
   ],
   "source_pdf_sha256": "9cc531ab239f6266c8aeddcc8e54f4c06029c44e825444bee137bbcc0c9d0a8e",
   "status": "current"
  },
  {
   "@type": "Claim",
   "@id": "https://wulfkaal.github.io/claims/3782210-028",
   "identifier": "kaal:claim:3782210-028",
   "text": "With the balanced staking and fee-sharing necessities implemented, the cost of faking reputation is at an absolute minimum double the value of that reputation, which is how reputation is made more valuable than money.",
   "abstract": "With #e and #j implemented, the cost of faking your reputation is (at an absolute minimum) double the value of the reputation.",
   "citation": "Craig Calcaterra, Wulf A. Kaal, The Importance of Reputation for the Evolution of Decentralization (2021). SSRN: https://ssrn.com/abstract=3782210",
   "datePublished": "2021",
   "claim_type": "mechanism",
   "confidence": "evidenced",
   "is_failure_mode": false,
   "scope_conditions": [
    "both the balanced staking necessity and the shared salary necessity are implemented"
   ],
   "source_pdf_sha256": "9cc531ab239f6266c8aeddcc8e54f4c06029c44e825444bee137bbcc0c9d0a8e",
   "status": "current"
  },
  {
   "@type": "Claim",
   "@id": "https://wulfkaal.github.io/claims/3799320-039",
   "identifier": "kaal:claim:3799320-039",
   "text": "Reputation weighted salary distribution solves the sockpuppet attack, because a member who creates ten accounts holding one reputation token each ends up in the same position as one account holding ten reputation tokens.",
   "abstract": "This solves the sockpuppet attack because if a DAO of DAOs member creates 10 accounts with 1 reputation token each, it is the same as 1 account with 10 reputation tokens.",
   "citation": "Wulf A. Kaal, A Decentralized Autonomous Organization (DAO) of DAOs (2021). SSRN: https://ssrn.com/abstract=3799320",
   "datePublished": "2021",
   "claim_type": "mechanism",
   "confidence": "argued",
   "is_failure_mode": false,
   "scope_conditions": [
    "salary pool distributed in proportion to reputation holdings"
   ],
   "source_pdf_sha256": "c3dff852f2d3f04718c829a24189309a7db4d92d84f6045d3d4f562d87c03e63",
   "status": "current"
  }
 ],
 "description": "10 claims in the published works of Wulf A. Kaal carry the concept tag 'sockpuppet-attack'. Derived node: a roster, not an adjudicated definition."
}