Omer, founder of Chaos Labs, a partner of LayerZero's witch detection, disclosed the process of LayerZero's witch detection on the X platform. He said that the principle of detection is to ensure that real users are not harmed, maximize accuracy, and screen out large-scale airdrop hunter addresses.
Data shows that the total number of LayerZero users is 4.82 million, the number of addresses with independent sources of funds is 2.18 million, and witch addresses account for about 14.5%. Note: This mid-term analysis only includes the EVM chain, and Aptos will be analyzed separately in the coming weeks.
In terms of determining the source of user funds, the detection focuses on CEX/DEX and bridges (covering more than 50% of the recharge addresses), marking the first native token transfer of each account as a recharge transaction, and having the same source of funds within 24 hours. The address with roughly the same interactive behavior will be marked as a witch.
Initially, approximately 2 million users were flagged as witches, accounting for 41% of LayerZero's unique users, which was then refined to 704,041 users through final filtering, accounting for approximately 14.5% of LayerZero's unique users.