Airdrops can be a great way to engage communities, but they also come with risks — from Sybil attacks to potential regulatory liability.