A serial rug-pull operation spanning at least 12 token deployments on Solana. Using a hierarchical wallet network of 34 master nodes and 103+ bot wallets, the operator(s) repeatedly deploy tokens, manufacture demand, extract liquidity, and redeploy the capital into the next operation.
The operator structure is hierarchical. A single hub wallet funds and coordinates the master nodes, which in turn control the bot layer.
All 12 tokens confirmed to be part of this ring. Capital from each has been traced to the main token.
The operator follows a repeatable, documented playbook for each token deployment.
New token created via Pump.fun or equivalent. Deployer funded by Ring Hub wallet.
Master nodes and secondary bots execute micro-buys across multiple sessions to create trending signals on DexScreener and Dextools.
Organic retail buys in. Volume metrics inflate. Token appears legitimately active.
All LP withdrawn in single coordinated transaction. Token value collapses. Retail cannot sell for meaningful value.
Extracted SOL routed back through the hub and redeployed as buying pressure on the current active token. Cycle repeats.
Deep trace forensic analysis of wallet 5CXwocH... proving direct funding from tracked Master Node infrastructure.
Extracted capital from prior rugs gathers in the central liquidity pool.
Funds distributed to secondary operational nodes to obfuscate the origin of the buy pressure.
Direct SOL injection into a fresh execution bot for token buy-backs and wash trading.
Note: This trace confirms that "new" buyers on rugs are actually puppets of the same syndicate, using identical capital gathered from previous extraction events.
Forensic tracing proves the syndicate pools capital from multiple extraction events into a unified operational hub. The funds are not isolated to a single rug.