← Manipulation patterns · How each detector works · API: /v1/forensics/case/CL-C3cf171e2 (JSON), ?format=html (printable), .pdf — full pack with a trial or paid key · MCP tool forensics_case

Case file CL-C3cf171e2: Creator group C3cf171e2 — 1 creator wallet(s), 22 launches

Kind: cluster · built 2026-10-23 18:14:21 UTC from the analysis snapshot of 2026-10-23 17:48:48 UTC (window 72 h) · builder cases-1.0

Preview. The full pack (all transaction signatures, funding graph, per-wallet P&L, full timeline, printable HTML and PDF) needs a trial or paid API key: /signup (14-day free trial) or /pricing.

Summary

1 creator wallet(s) in this group launched 22 tokens we have trade data for; 20 (91%) died (not migrated, no trades for 2 h, and below 30% of peak or back under 40 SOL market cap), 22 had the creator sell 90%+ within 10 minutes; median active time 8 min; creators' combined realized curve P&L +135.27 SOL.
Token case files: 0 of these launches have their own case.

Subject

group id	C3cf171e2
creators	`4oog7Vh6BfGkU2Zb4ott8hTvCaFDqs5fWdWzgNZDYA5D`
wallets	`4oog7Vh6BfGkU2Zb4ott8hTvCaFDqs5fWdWzgNZDYA5D` `C452z7W8HGAz2Zu8TLARMeZ1X9bDSxTuTpNX1r1E94Dg`
n wallets	2
group score	86
link rules	creation-block buys by the same wallet on 2+ launches of a creator; shared first-funding wallet; outflows through the same intermediate/deposit address

Detectors

Each detector reports on-chain facts only, with a confidence from 0 to 1 that the pattern is present (not a finding about intent or identity).

Recurring launch-and-exit pattern fired · confidence 0.87 (high)
1 creator wallet(s) in this group launched 22 tokens we have trade data for; 20 (91%) died (not migrated, no trades for 2 h, and below 30% of peak or back under 40 SOL market cap), 22 had the creator sell 90%+ within 10 minutes; median active time 8 min; creators' combined realized curve P&L +135.27 SOL.
False-positive risk: Most pump.fun tokens die; a high death rate for a prolific creator is common and is weaker evidence than the per-token detectors.
Evidence transactions: 4jqxoa…Tr1y4q 4ZsJbd…1vS12Q 4oG7wg…BkAug4

Launches

Created (UTC)	Token	Creator	Peak / last mcap (SOL)	Died	Creator sold	First sell after	Creator net SOL	Creation tx
2026-10-16 13:05:14 UTC	ZAXIS	`4oog…YA5D`	106.6 / 27.96	yes	100%	34 s	+5.640	`64GXba…Rs3jWY`
2026-10-16 13:07:08 UTC	ZAXIS	`4oog…YA5D`	101.58 / 27.96	yes	100%	6 s	+5.401	`4m5ZW8…n6vzgy`
2026-10-16 13:08:34 UTC	ZAXIS	`4oog…YA5D`	77.66 / 27.96	yes	100%	1 s	+2.576	`BSW5CA…CsoXG1`
2026-10-16 13:10:23 UTC	ZAXIS	`4oog…YA5D`	145.38 / 27.96	yes	100%	8 s	+5.991	`31mQrq…tcuCt1`
2026-10-16 13:12:10 UTC	ZAXIS	`4oog…YA5D`	163.07 / 27.96	yes	100%	10 s	+9.791	`41nUPp…kABP9R`
2026-10-16 13:14:18 UTC	ZAXIS	`4oog…YA5D`	91.25 / 27.96	yes	100%	5 s	+0.971	`3cGHJB…r9K2zD`
2026-10-16 13:15:57 UTC	ZAXIS	`4oog…YA5D`	90.85 / 27.96	yes	100%	4 s	+0.423	`5Bg3dX…5Xacbg`
2026-10-19 13:41:06 UTC	SM	`4oog…YA5D`	83.1 / 27.96	yes	100%	27 s	+0.679	`2Jabdb…ZViHYU`

Timeline

8 of 22 events shown (first buy per wallet; all creator trades; calls; peak; last trade).

Time (UTC)	Event	Wallet / caller	Tx / link
2026-10-16 13:05:14 UTC	token created ZAXIS	`4oog…YA5D`	`64GXba…Rs3jWY`
2026-10-16 13:07:08 UTC	token created ZAXIS	`4oog…YA5D`	`4m5ZW8…n6vzgy`
2026-10-16 13:08:34 UTC	token created ZAXIS	`4oog…YA5D`	`BSW5CA…CsoXG1`
2026-10-16 13:10:23 UTC	token created ZAXIS	`4oog…YA5D`	`31mQrq…tcuCt1`
2026-10-16 13:12:10 UTC	token created ZAXIS	`4oog…YA5D`	`41nUPp…kABP9R`
2026-10-16 13:14:18 UTC	token created ZAXIS	`4oog…YA5D`	`3cGHJB…r9K2zD`
2026-10-16 13:15:57 UTC	token created ZAXIS	`4oog…YA5D`	`5Bg3dX…5Xacbg`
2026-10-19 13:41:06 UTC	token created SM	`4oog…YA5D`	`2Jabdb…ZViHYU`

Supporting transactions

5 shown of 44. Every row can be checked on Solscan or any Solana node.

Time (UTC)	Slot	Wallet	Role	Side	SOL	Tokens	Signature
							`4jqxoa…Tr1y4q`
							`4ZsJbd…1vS12Q`
							`4oG7wg…BkAug4`
							`3drTDp…6J8Gs9`
							`4KG7Vn…F9wnZC`

Limitations

Bonding-curve trades on pump.fun only (decoded from public Solana data by our collector); trades after migration to a DEX and transfers outside the curve are not in P&L.
P&L is in SOL, before fees and priority tips; unrealized value uses the last bonding-curve price, which a large sale could not achieve.
Wallet links are statistical (shared creation-block buying, shared funding wallet, shared exchange deposit path); one person can use many wallets and unrelated people can share infrastructure such as bots.
Caller (KOL) call times are pump.fun home-feed callout times; we link the caller's public X profile and, where we captured it, the post. Telegram calls are not collected.
Exchange cash-out paths follow up to 3 hops of plain SOL/USDC transfers and stop at labeled exchange wallets; amounts are upper bounds of the traced wallet's money on that path.
Collector gaps (RPC drops) can miss a small share of trades; transaction signatures can be checked independently on Solscan or any Solana node.

Integrity

SHA-256 of the full pack: 093d002be82d268c0cc1185acd0db7a7d48fffa323eafa01c209ab08a6ba10ce
Retrieved/built at: 2026-10-23 18:14:21 UTC
Method: JSON of the pack without the "integrity" field, keys sorted, separators (",", ":"), UTF-8, no ASCII escaping. Verify with the JSON from /v1/forensics/case/CL-C3cf171e2: python3 -c "import json,hashlib,sys;p=json.load(open(sys.argv[1]));p=p.get('pack',p);p.pop('integrity',None);print(hashlib.sha256(json.dumps(p,sort_keys=True,separators=(',',':'),ensure_ascii=False).encode()).hexdigest())" pack.json

Automated analysis of public blockchain data. Detectors report on-chain facts and patterns "consistent with" known manipulation techniques; they make no claim about the intent or identity of any person. Wallets are not linked to real identities. Exchange labels come from public datasets and can be wrong. Not legal, financial or investment advice. Corrections: admin@deepcounterfeit.com.