A coordinated meme coin syndicate has been unmasked on Solana, issuing over 6,855 tokens since January 2026 and funneling profits into a single wallet holding $1.02 million USDC that has never sent a single transaction.
TREE NEWS reports: The operation, first uncovered through on-chain sleuthing, involves 43 wallets with distinct roles: 32 token-issuing wallets, 8 intermediary wallets, 3 bundle-buying wallets, 2 collection wallets, and 1 final sink wallet. The sink wallet, 8wZf1QPda7HeQQYPXebVu8HGEKcCoiSoT7KsuwYLWtFX, has received 188 inbound transfers since May 9—all deposits, zero outbound—totaling $1.02 million USDC from just two collection wallets.
The Five-Step Pump-and-Dump Playbook
Each token launch follows a near-identical script. The issuer creates a token and buys 10–15% of supply in the same transaction. Within the same block, three other network wallets pile in. External buyers—sniper bots, copy-traders, and retail—rush in. Then the issuer dumps. The median time from launch to full exit: 3 seconds. Profits flow to collection wallets, then to the sink.
Analysis of 160 launches found 461 bundle buys, all concentrated in the creation block. 90% immediately followed the creation transaction, occupying positions 1, 2, and 3. Not a single bundle buy appeared in a later block—proof that the buys were packaged with the launch, leaving no room for outsiders.
Coordinated Wallets, Not Random Traders
The three follow-on wallets are not fresh addresses; they are other issuers in the same network. Wallet A launches, B, C, and D buy; when B launches, A, C, and E buy. One wallet, 3cCqweS8…, participated in eight different issuers’ launches. This is not organic copy-trading—it is a coordinated assembly line.
The smoking gun: on October 14 at 15:39:14, 36 wallets emptied their SOL into a collection wallet in the same block. Two minutes later, another wallet followed. Three minutes after that, the collection wallet sent $71,874 USDC to the sink. Coordinating 36 wallets in one block requires a script—and it happened repeatedly.
Who Is Behind It?
The sink wallet has no KOLScan profile, no .sol domain, and no X mentions. The traced wallets were funded by KuCoin, Bybit, and Binance—only these exchanges can link addresses to real identities. A comparison against nearly 1,000 known KOL wallets found no overlap or transfers.
Since September 9, the current issuer, DRXPafDu, has launched 1,118 tokens. About 3% of tokens “take off” like the token ‘fun’ did on October 22—but even then, the operator exits before the pump. Every SOL extracted comes from buyers who enter after the issuer.
How to Avoid Becoming Exit Liquidity
- Check the launch block: if three wallets buy immediately after the issuer, it’s a bundle.
- Review issuer history: 50 tokens a day signals a syndicate, not a project.
- Verify whether the issuer has sold—in this network, exits take 3 seconds.
- Never buy in the first seconds of a token launched by a serial issuer.
As meme coin factories industrialize, the on-chain footprint becomes clearer—and so do the tools to avoid becoming the exit liquidity.
