Case file KOL-f95c1c54eb: Caller wenZoo (@WenZ0ooo) — D1ab…1dwe
Kind: kol · built 2026-10-23 18:17:23 UTC from the analysis snapshot of 2026-10-23 17:48:48 UTC (window 72 h) · builder cases-1.0
Summary
- On 17 of 18 calls of tokens it did not create, wallet D1ab…1dwe bought before posting (median 0.9 min before) and sold 50%+ within 30 minutes after (median 3.8 min after the call) while other wallets were buying (238.42 SOL from 725 buys-by-wallet between the calls and the sells); net +2.593 SOL on those calls. pump.fun callouts are tied to a position, so holding before the call is expected; the flagged part is selling into post-call buying.
- 18 of 18 called tokens fell 50%+ below the call-time market cap within 1 h. This is a market outcome, not evidence of the caller's own selling; shown as context and not counted as a detector.
Subject
| wallet | D1abSKJj7FAucjEj4hLDrLA5mpk2bmQvwr3XpvRK1dwe |
|---|---|
| pumpfun handle | wenZoo |
| x handle | WenZ0ooo |
| x profile | https://x.com/WenZ0ooo |
| followers | 3036 |
| on public kol list | no |
| transfers from traced creators | 0 |
Detectors
Each detector reports on-chain facts only, with a confidence from 0 to 1 that the pattern is present (not a finding about intent or identity).
Caller bought before its calls and sold into them fired · confidence 0.9 (high)
On 17 of 18 calls of tokens it did not create, wallet D1ab…1dwe bought before posting (median 0.9 min before) and sold 50%+ within 30 minutes after (median 3.8 min after the call) while other wallets were buying (238.42 SOL from 725 buys-by-wallet between the calls and the sells); net +2.593 SOL on those calls. pump.fun callouts are tied to a position, so holding before the call is expected; the flagged part is selling into post-call buying.
False-positive risk: A caller can buy because they like the token and post it later; selling after posting can be ordinary profit-taking. We report timing only.
Evidence transactions:
On 17 of 18 calls of tokens it did not create, wallet D1ab…1dwe bought before posting (median 0.9 min before) and sold 50%+ within 30 minutes after (median 3.8 min after the call) while other wallets were buying (238.42 SOL from 725 buys-by-wallet between the calls and the sells); net +2.593 SOL on those calls. pump.fun callouts are tied to a position, so holding before the call is expected; the flagged part is selling into post-call buying.
False-positive risk: A caller can buy because they like the token and post it later; selling after posting can be ordinary profit-taking. We report timing only.
Evidence transactions:
5Uzbti…2jwvNa RevT99…z2bJWG 3aatfx…dnvTN1Called tokens fell 50%+ within 1 h (context, not a detector) not fired
18 of 18 called tokens fell 50%+ below the call-time market cap within 1 h. This is a market outcome, not evidence of the caller's own selling; shown as context and not counted as a detector.
False-positive risk: Many traders react to the same call; wallets of a group selling at once can also be one bot managing several wallets for unrelated reasons.
18 of 18 called tokens fell 50%+ below the call-time market cap within 1 h. This is a market outcome, not evidence of the caller's own selling; shown as context and not counted as a detector.
False-positive risk: Many traders react to the same call; wallets of a group selling at once can also be one bot managing several wallets for unrelated reasons.
Calls (third-party tokens)
| Token | First buy (UTC) | Call (UTC) | Min buy→call | Min call→sell | Bought SOL | Sold in 30 min | Others bought before caller sold | Net SOL | Mcap at call / min 1 h | Links |
|---|---|---|---|---|---|---|---|---|---|---|
| REAGENT | 2026-10-20 18:12:41 UTC | 2026-10-20 18:13:29 UTC | 0.8 | 1.7 | 1.5784 | 100% (1.8197 SOL) | 48.433 SOL / 104 wallets | +0.241 | 67.18 / -55% | X profile |
| BotScanner | 2026-10-20 19:46:22 UTC | 2026-10-20 19:47:21 UTC | 1.0 | 4.7 | 1.5577 | 100% (1.4531 SOL) | 7.5448 SOL / 49 wallets | -0.105 | 68.29 / -59% | X profile |
| Crawlhive | 2026-10-20 19:57:47 UTC | 2026-10-20 19:58:40 UTC | 0.9 | 3.6 | 1.5244 | 100% (1.4412 SOL) | 7.9654 SOL / 40 wallets | -0.083 | 64.8 / -57% | X profile |
| Crawlbrain | 2026-10-20 20:38:23 UTC | 2026-10-20 20:39:19 UTC | 0.9 | 5.5 | 1.5874 | 100% (1.4271 SOL) | 15.4969 SOL / 35 wallets | -0.160 | 67.25 / -57% | X profile |
| REAGENT | 2026-10-20 21:52:13 UTC | 2026-10-20 21:53:05 UTC | 0.9 | 4.7 | 1.6902 | 100% (2.0853 SOL) | 18.3993 SOL / 60 wallets | +0.395 | 69.47 / -59% | X profile |
Timeline
8 of 54 events shown (first buy per wallet; all creator trades; calls; peak; last trade).
| Time (UTC) | Event | Wallet / caller | SOL | Tokens (% supply) | Mcap SOL | Tx / link |
|---|---|---|---|---|---|---|
| 2026-10-20 18:12:41 UTC | caller buy (before call) REAGENT | |||||
| 2026-10-20 18:13:29 UTC | public call REAGENT | |||||
| 2026-10-20 18:15:14 UTC | caller sell (after call) REAGENT | |||||
| 2026-10-20 19:46:22 UTC | caller buy (before call) BotScanner | |||||
| 2026-10-20 19:47:21 UTC | public call BotScanner | |||||
| 2026-10-20 19:52:03 UTC | caller sell (after call) BotScanner | |||||
| 2026-10-20 19:57:47 UTC | caller buy (before call) Crawlhive | |||||
| 2026-10-20 19:58:40 UTC | public call Crawlhive |
Supporting transactions
5 shown of 55. Every row can be checked on Solscan or any Solana node.
| Time (UTC) | Slot | Wallet | Role | Side | SOL | Tokens | Signature |
|---|---|---|---|---|---|---|---|
| 2026-10-20 18:12:41 UTC | 459324996 | D1ab…1dwe | caller | buy | 1.577347 | 27037664.7792 | 5Uzbti…2jwvNa |
| 2026-10-20 18:13:12 UTC | 459325136 | D1ab…1dwe | caller | buy | 0.001076 | 16027.9868 | RevT99…z2bJWG |
| 2026-10-20 18:15:14 UTC | 459325707 | D1ab…1dwe | caller | sell | 0.681588 | 9488845.1126 | 3aatfx…dnvTN1 |
| 2026-10-20 18:15:20 UTC | 459325740 | D1ab…1dwe | caller | sell | 1.138006 | 17622140.9234 | 3e375D…vWqp35 |
| 2026-10-20 18:35:51 UTC | 459331426 | D1ab…1dwe | caller | sell | 0.000127 | 3677.8362 | 3Jt3zQ…CaWuqa |
Limitations
- Bonding-curve trades on pump.fun only (decoded from public Solana data by our collector); trades after migration to a DEX and transfers outside the curve are not in P&L.
- P&L is in SOL, before fees and priority tips; unrealized value uses the last bonding-curve price, which a large sale could not achieve.
- Wallet links are statistical (shared creation-block buying, shared funding wallet, shared exchange deposit path); one person can use many wallets and unrelated people can share infrastructure such as bots.
- Caller (KOL) call times are pump.fun home-feed callout times; we link the caller's public X profile and, where we captured it, the post. Telegram calls are not collected.
- Exchange cash-out paths follow up to 3 hops of plain SOL/USDC transfers and stop at labeled exchange wallets; amounts are upper bounds of the traced wallet's money on that path.
- Collector gaps (RPC drops) can miss a small share of trades; transaction signatures can be checked independently on Solscan or any Solana node.
Integrity
SHA-256 of the full pack: 57e4ef61c085f230b3482575365e79c17d4ed48001fc6161212c84a84c4f7dfa
Retrieved/built at: 2026-10-23 18:17:23 UTC
Method: JSON of the pack without the "integrity" field, keys sorted, separators (",", ":"), UTF-8, no ASCII escaping. Verify with the JSON from /v1/forensics/case/KOL-f95c1c54eb: python3 -c "import json,hashlib,sys;p=json.load(open(sys.argv[1]));p=p.get('pack',p);p.pop('integrity',None);print(hashlib.sha256(json.dumps(p,sort_keys=True,separators=(',',':'),ensure_ascii=False).encode()).hexdigest())" pack.json
Automated analysis of public blockchain data. Detectors report on-chain facts and patterns "consistent with" known manipulation techniques; they make no claim about the intent or identity of any person. Wallets are not linked to real identities. Exchange labels come from public datasets and can be wrong. Not legal, financial or investment advice. Corrections: admin@deepcounterfeit.com.