[xoa]

>How does the Wikimedia foundation attempt to handle this?

Add a time cost to accounts that is independent from IP or real identity. I gave a suggestion to factoring the product of primes, basically breaking crypto with far fewer bits then would ever be used in a real system to tune to time to a desired target. Another option would be to require a security key for anonymous editing of hot articles then ban the key if needed, which would essentially be a fairly anonymous proxy for money. Now attackers need to spend a key each ban. Although unlike just doing it purely for Wikipedia that might result in a market of "used, banned" keys which isn't really great. But they shouldn't do it via IP, they absolutely could do better.