Verification & anti-sybil

How CanQuest keeps bots and multi-account farming out.

The controls

Invite-gated wallets — creating a wallet needs a team invite code under a daily quota. One person, one Canton party ID.
Email OTP — wallet creation confirms your email with a 6-digit code.
Captcha — Cloudflare Turnstile guards sensitive flows like password reset and Twitter connect.
Server-side decisions — points, quest outcomes, and reward draws are decided on the server, never in the browser.
Server-verified social — X follow/retweet tasks are checked via the Twitter API, not self-reported.
Referral anti-farm — a referral only credits after the invitee verifies their email and connects an X account.

Not KYC

These controls raise the cost and friction of farming — they don't prove a single real-world human behind every account. CanQuest is not a KYC product.

The commitment gate

The strongest defense is economic. Joining high-value campaigns requires a commitment — locked CC, earned points, or both. Replicating that across many fake accounts is expensive, so farming at scale stops being worth it.