Our airdrop registration is being flooded by scripts that create thousands of wallets. I need layered filtering that real users never notice: a signed-message challenge, wallet age and activity checks, rate limits per IP and device, invisible bot checks such as Cloudflare Turnstile, duplicate and cluster detection, and a review queue for borderline cases. Please explain what each layer catches and what it can wrongly block, and keep privacy law in mind when storing any data.

Roughly 50% of current sign-ups look automated and would take allocation from real community members.

Key Deliverables:

• Scoping, Setup & Test Environment: Reviewing the spec or existing setup, preparing a testnet or staging environment, and agreeing the plan.

• Implementation & Security Review: Completing the main work with tests, then reviewing keys, permissions, rate limits and failure cases.

• Production Rollout & Handover: Approved release to production, verification on explorer or monitoring, and a short runbook for the team.

Requirements:

• Demonstrated experience with Anti-Bot Systems, Cloudflare, Node.js, Web3 Security, Rate Limiting

• Quick turnaround needed — must be available to start within 24 hours.

• Never ask for or accept private keys or seed phrases; work with read-only access, testnets and a multisig or the client's own signers.

• Mainnet deployment or production traffic changes only after we approve the result on testnet or staging.

If you have experience with this type of project, we'd love to hear from you. Please include relevant work samples with your bid.

[!NOTE]

Notice: Web3 & Crypto projects on BotDigit cover software, infrastructure and content work only. Freelancers must never ask for private keys or seed phrases, and clients are responsible for the legal and regulatory status of their token, airdrop or service where they operate. Nothing here is investment advice.