TrustLayer Sybil Scanner — ERC-8004 Feedback Forensics
Detects fake reviews, Sybil rings, rating manipulation, and reputation laundering in ERC-8004 agent ratings across 20 chains including Base, Ethereum, BSC, Celo, Gnosis, Optimism, Arbitrum, Avalanche, Polygon, Monad, and Solana.
Most agent reputation systems show you the rating. This one tells you if the rating is real.
API Base: https://api.thetrustlayer.xyz
No API key required (beta). x402 micropayments on paid endpoints ($0.001 USDC per query).
What this catches that others don't
- - Sybil rings: Clusters of wallets that only review each other
- Reviewer quality: A 5-star review from a trusted agent vs a throwaway wallet are not the same. Scores are weighted by reviewer reputation.
- Cross-chain laundering: Agent has great reviews on BSC but terrible ones on Base? Identities are resolved across chains and score divergence is flagged.
- Temporal anomalies: Sudden bursts of positive reviews after a period of bad ones. Review bombing. Rating manipulation patterns over time.
- Spam feedback: Known spam patterns detected via tag analysis and filtered before scoring.
When to use this skill
- - Before paying another agent via x402 or any payment method
- When a user asks "is this agent legit?" or "are these reviews real?"
- Before entering escrow with an unknown agent
- When evaluating whether to hire or delegate to another agent
- When you see a high rating and want to know if it is earned or gamed
Sybil Scan
CODEBLOCK0
Replace <chain> with: base, ethereum, bsc, celo, gnosis, optimism, arbitrum, avalanche, polygon, monad, mantle, scroll, linea, metis, taiko, solana-mainnet (and more)
Replace <agentId> with the numeric agent ID.
Example:
CODEBLOCK1
What comes back
The response is JSON. The fields that matter most for fraud detection:
Sybil & fraud signals:
- -
sybil_risk: "low" / "medium" / "high". High means the reviewer network looks artificial. - INLINECODE4 : Array of detected issues. Empty = clean. Watch for:
review_bombing, duplicate_feedback_content, single_agent_reviewers, spam_feedback, reputation_laundering. - INLINECODE10 : The trust score after adjusting for reviewer credibility. If this is much lower than
trust_score, the agent's good reviews are coming from low-quality reviewers.
Cross-chain signals:
- -
cross_chain_scores: If present, this agent exists on multiple chains. Check laundering_risk and score_divergence. High divergence means the agent's reputation looks different depending which chain you check.
Overall assessment:
- -
trust_score (0-100): Composite score. 80+ low risk, 50-79 medium, below 50 high risk. - INLINECODE16 : "low" / "medium" / "high". Quick decision signal.
- INLINECODE17 : How much USD to risk with this agent.
- INLINECODE18 : "low" / "medium" / "high" based on data volume.
Decision logic
CODEBLOCK2
Pre-payment check example
About to pay agent base:5000 for a $50 service:
CODEBLOCK3
Report to user:
"Scanned base:5000. Trust score: $SCORE. Sybil risk: $SYBIL. Anomaly flags: $FLAGS"
If sybil_risk is high: "This agent's reviews show signs of Sybil manipulation. Recommend not transacting."
Other endpoints
Agent lookup (paid $0.001 USDC — returns full agent profile, metadata, and on-chain registration details):
CODEBLOCK4
Leaderboard (most trusted agents, Sybil-filtered — rate-limited: 5 free per IP per hour, then 402):
CODEBLOCK5
Network stats (live counts of total agents, Sybil flags, chains covered, and more):
CODEBLOCK6
Reviewer lookup (paid $0.001 USDC — returns reviewer quality score, total reviews, unique agents reviewed, quality tier, and recent review history):
curl -s "https://api.thetrustlayer.xyz/reviewer/<wallet_address>"
Only 9 out of 11,247 reviewers score 80+. Use this to verify if a reviewer is trustworthy.
Owner portfolio (paid $0.001 USDC — returns all agents owned by one wallet across chains, with cross-chain group info, average trust score, and risk assessment):
curl -s "https://api.thetrustlayer.xyz/owner/<wallet_address>"
Use for due diligence on an agent operator.
Score history (paid $0.001 USDC — returns full daily score time-series, 7d/30d trajectory, and volatility):
curl -s "https://api.thetrustlayer.xyz/history/<chain>:<agentId>"
2.15M snapshots across 89K agents. Use to check if an agent's reputation is stable or volatile.
Call /stats for current network coverage — agent counts, Sybil flags, cross-chain groups, and chain breakdown are all returned live.
Visual reports
For a full visual breakdown with score history, anomaly timeline, and cross-chain map:
CODEBLOCK10
How scoring works
Scores combine three dimensions, each weighted by data quality:
- 1. Profile completeness: Does the agent have metadata, description, active endpoints?
- Feedback volume: How much feedback exists? Weighted by reviewer quality, not raw count.
- Feedback legitimacy: Are reviewers themselves reputable? Are there Sybil patterns? Spam? Temporal anomalies?
Six Sybil detection methods run on every sync:
- - Reviewer overlap clustering
- One-to-one review pattern detection
- Wallet age and activity analysis
- Cross-chain identity correlation
- Feedback timing anomaly detection
- Tag-based spam filtering
Scores update daily. Historical score snapshots retained for 90 days.
TrustLayer Sybil扫描器 — ERC-8004反馈取证
检测Base、以太坊、BSC、Celo、Gnosis、Optimism、Arbitrum、Avalanche、Polygon、Monad和Solana等20条链上ERC-8004代理评分中的虚假评论、Sybil环、评分操纵和声誉洗钱行为。
大多数代理声誉系统只显示评分。而本系统会告诉你评分是否真实。
API基础地址： https://api.thetrustlayer.xyz
无需API密钥（测试版）。付费端点支持x402微支付（每次查询$0.001 USDC）。
本系统能捕获而其他系统无法捕获的问题
- - Sybil环：仅互相评价的钱包集群
- 评价者质量：来自可信代理的5星评价与来自一次性钱包的5星评价不可同日而语。评分根据评价者声誉加权计算。
- 跨链洗钱：代理在BSC上好评如潮，但在Base上差评连连？跨链解析身份并标记评分差异。
- 时间异常：在一段差评期后突然涌现大量好评。刷评攻击。随时间变化的评分操纵模式。
- 垃圾反馈：通过标签分析检测已知垃圾模式，在评分前过滤。
何时使用本技能
- - 通过x402或任何支付方式向其他代理付款前
- 当用户询问这个代理靠谱吗？或这些评论真实吗？
- 与未知代理进入托管前
- 评估是否雇佣或委托其他代理时
- 看到高评分并想了解是真实获得还是刷出来的
Sybil扫描
bash
curl -s https://api.thetrustlayer.xyz/trust/<链>:<代理ID>
将<链>替换为：base、ethereum、bsc、celo、gnosis、optimism、arbitrum、avalanche、polygon、monad、mantle、scroll、linea、metis、taiko、solana-mainnet（以及更多）
将<代理ID>替换为数字代理ID。
示例：
bash
curl -s https://api.thetrustlayer.xyz/trust/base:1378
返回内容
响应为JSON格式。对欺诈检测最重要的字段：
Sybil与欺诈信号：
- - sybilrisk：低/中/高。高风险意味着评价者网络看起来不自然。
- anomalyflags：检测到的问题数组。空数组表示干净。需关注：reviewbombing、duplicatefeedbackcontent、singleagentreviewers、spamfeedback、reputationlaundering。
- reviewerweightedscore：根据评价者可信度调整后的信任评分。如果该值远低于trustscore，说明代理的好评来自低质量评价者。
跨链信号：
- - crosschainscores：如果存在，表示该代理存在于多条链上。检查launderingrisk和scoredivergence。高差异意味着代理的声誉因检查的链不同而不同。
总体评估：
- - trustscore（0-100）：综合评分。80+低风险，50-79中等风险，低于50高风险。
- risklevel：低/中/高。快速决策信号。
- recommendedmaxexposure_usd：与该代理交易时建议承担的最大美元风险敞口。
- confidence：基于数据量的低/中/高。
决策逻辑
IF sybil_risk == high → 阻止。告知用户原因。
IF review_bombing in flags → 阻止。可能被操纵。
IF reputation_laundering in flags → 阻止。跨链欺诈模式。
IF risk_level == high → 阻止。总体高风险。
IF spam_feedback in flags → 警告。评分可能被夸大。
IF crosschain launderingrisk == high → 警告。检查每条链。
IF reviewerweightedscore < trust_score - 15 → 警告。好评来自差评者。
IF recommendedmaxexposure < 交易金额 → 减少风险敞口或警告。
ELSE → 继续。
付款前检查示例
即将向代理base:5000支付$50服务费：
bash
RESULT=$(curl -s https://api.thetrustlayer.xyz/trust/base:5000)
提取关键欺诈信号
SYBIL=$(echo $RESULT | grep -o sybil_risk:[^]* | cut -d -f4)
RISK=$(echo $RESULT | grep -o risk_level:[^]* | cut -d -f4)
SCORE=$(echo $RESULT | grep -o trust_score:[0-9]* | cut -d: -f2)
FLAGS=$(echo $RESULT | grep -o anomaly_flags:\[[^]]*\])
向用户报告：
已扫描base:5000。信任评分：$SCORE。Sybil风险：$SYBIL。异常标记：$FLAGS
如果sybil_risk为高：该代理的评论显示存在Sybil操纵迹象。建议不要进行交易。
其他端点
代理查询（付费$0.001 USDC — 返回完整代理资料、元数据和链上注册详情）：
bash
curl -s https://api.thetrustlayer.xyz/agent/<链>:<代理ID>
排行榜（最受信任的代理，经Sybil过滤 — 限速：每个IP每小时5次免费，之后返回402）：
bash
curl -s https://api.thetrustlayer.xyz/leaderboard?chain=base&limit=10
网络统计（实时显示总代理数、Sybil标记数、覆盖链数等）：
bash
curl -s https://api.thetrustlayer.xyz/stats
评价者查询（付费$0.001 USDC — 返回评价者质量评分、总评论数、评价过的唯一代理数、质量等级和近期评论历史）：
bash
curl -s https://api.thetrustlayer.xyz/reviewer/<钱包地址>
在11,247名评价者中，只有9人评分达到80+。使用此功能验证评价者是否可信。
所有者投资组合（付费$0.001 USDC — 返回一个钱包跨链拥有的所有代理，包含跨链组信息、平均信任评分和风险评估）：
bash
curl -s https://api.thetrustlayer.xyz/owner/<钱包地址>
用于对代理运营者进行尽职调查。
评分历史（付费$0.001 USDC — 返回完整每日评分时间序列、7天/30天趋势和波动性）：
bash
curl -s https://api.thetrustlayer.xyz/history/<链>:<代理ID>
覆盖89K个代理的215万条快照。用于检查代理声誉是否稳定或波动。
调用/stats获取当前网络覆盖范围 — 实时返回代理数量、Sybil标记数、跨链组和链分布情况。
可视化报告
如需包含评分历史、异常时间线和跨链地图的完整可视化分析：
https://thetrustlayer.xyz/agent/<链>:<代理ID>
评分机制
评分结合三个维度，每个维度按数据质量加权：
- 1. 资料完整性：代理是否有元数据、描述、活跃端点？
- 反馈数量：有多少反馈？按评价者质量加权，而非原始数量。
- 反馈合法性：评价者本身是否可信？是否存在Sybil模式？垃圾信息？时间异常？
每次同步运行六种Sybil检测方法：
- - 评价者重叠聚类
- 一对一评价模式检测
- 钱包年龄和活跃度分析
- 跨链身份关联
- 反馈时间异常检测
- 基于标签的垃圾过滤
评分每日更新。历史评分快照保留90天。
