← Manipulation patterns · How each detector works · API: /v1/forensics/case/TK-094ddbfeb6 (JSON), ?format=html (printable), .pdf — full pack with a trial or paid key · MCP tool forensics_case

Case file TK-094ddbfeb6: onboard.markets (ONBOARD) — CADG…pump

Kind: token · built 2026-10-23 18:13:35 UTC from the analysis snapshot of 2026-10-23 17:48:48 UTC (window 72 h) · builder cases-1.0

Preview. The full pack (all transaction signatures, funding graph, per-wallet P&L, full timeline, printable HTML and PDF) needs a trial or paid API key: /signup (14-day free trial) or /pricing.

Summary

  • Token ONBOARD (CADG…pump) was created 2026-10-21 02:44:20 UTC by wallet 4LXA…nx5C (wallet group C67d66616).
  • Market cap on the curve went from 131.3 SOL at the first trade to a peak of 295.7 SOL (0 s after creation) and 31.7 SOL at the last trade seen.
  • 16 creator/early/group wallets realized +56.19 SOL on the curve; 30 public call(s) in the window.
  • 15 wallets other than the creator bought 16.5% of supply in the creation slot 459466830 and the next 2 slots; 6 of them (14.2% of supply) are linked to the creator: they are in the creator's wallet group or also bought in the first slots of 2+ other launches by the same creator.
  • The creator wallet bought 57.8% of supply and sold 100% of it; first sell 0 s after creation, realized +64.41 SOL.
  • Caller whereslodo01 (wallet 6FWh…j5EW) bought 1.916 SOL of the token 0.4 min before posting the call, then sold 100% 6.7 min after it, while 286 other wallets bought 150.75 SOL between the call and that sell (caller net +2.689 SOL). pump.fun callouts are tied to a position, so the buy before the call is expected; the flagged part is selling into the post-call buying.

Subject

mintCADGrfVuEaZtrHetktNPLVu5HFUNrN12hYCZRTTZpump
nameonboard.markets
symbolONBOARD
creator4LXAFVZUUTdcqLCmgHq2NZmgLB2arRxp9wuYVa6rnx5C
creator groupC67d66616
bonding curveHAUtpSjor4EY3QRzGv3wqdcXZJF3r4inuZrWP7uLE8gf
created utc2026-10-21 02:44:20 UTC
creation sig3FEdSEXQa9…YRQWR9f529
creation solscanhttps://solscan.io/tx/3FEdSEXQa9r6duLCAWK2ksBrFu6EFcP6qoks4zftk1kommSYmoc7fusLyL3KwcogVAkpv8fH9MgPNjYRQWR9f529
coin pagehttps://pump.fun/coin/CADGrfVuEaZtrHetktNPLVu5HFUNrN12hYCZRTTZpump
impersonation alertno
manipulation score100
token socials
graduatedno

Detectors

Each detector reports on-chain facts only, with a confidence from 0 to 1 that the pattern is present (not a finding about intent or identity).

Bundled launch (linked wallets in the first slots) fired · confidence 0.92 (high)
15 wallets other than the creator bought 16.5% of supply in the creation slot 459466830 and the next 2 slots; 6 of them (14.2% of supply) are linked to the creator: they are in the creator's wallet group or also bought in the first slots of 2+ other launches by the same creator.
False-positive risk: Sniper bots buy in the first slots of many launches; we only count early buyers that the wallet-group rules link to the creator (the grouping ignores same-block buyers seen on more than 10 creators) or that bought early on 2+ other launches of the same creator. A bot that follows one prolific creator can still look linked.
Evidence transactions: 6E1MbQ…ezXwaK 6E1MbQ…ezXwaK 6E1MbQ…ezXwaK
Creator sell-off fired · confidence 0.8 (high)
The creator wallet bought 57.8% of supply and sold 100% of it; first sell 0 s after creation, realized +64.41 SOL.
False-positive risk: Creators often sell their allocation early; a fast sell alone is common on pump.fun and is not proof of a scheme.
Evidence transactions: 4HdnPZ…QDQ7JT 2icfrQ…hUt8Pe 2a9yek…rtzQuB
Wash-like trading not fired
0 wallet(s) bought and sold back the same size (within 2%) inside 3 slots at least 3 times, 0.00 SOL or 0.0% of the 1047.9 SOL curve volume, with no lasting position; 0 of them are linked to the creator (0.00 SOL); 0 time(s) a linked wallet sold and another linked wallet bought the same size (within 5%) in the same or next slot.
False-positive risk: MEV/sandwich and arbitrage bots buy and sell back the same size within a few slots; we only flag this for wallets linked to the creator, but a linked wallet can still be running such a bot. Same-size hand-offs can be coincidence on busy tokens.
Coordinated sells after a call not fired
No call on this token was followed by a burst of sells from 2+ linked wallets (1+ SOL, 2x the pre-call rate, 30%+ price drop).
False-positive risk: Many traders react to the same call; wallets of a group selling at once can also be one bot managing several wallets for unrelated reasons.
Caller bought before the call and sold into it fired · confidence 0.85 (high)
Caller whereslodo01 (wallet 6FWh…j5EW) bought 1.916 SOL of the token 0.4 min before posting the call, then sold 100% 6.7 min after it, while 286 other wallets bought 150.75 SOL between the call and that sell (caller net +2.689 SOL). pump.fun callouts are tied to a position, so the buy before the call is expected; the flagged part is selling into the post-call buying.
False-positive risk: A caller can buy because they like the token and post it later; selling after posting can be ordinary profit-taking. We report timing only.
Evidence transactions: t1c4qC…kXrDku qQ5niV…yA7hkh 3A5nTL…GFfJfQ

Related case files: CL-C67d66616, KOL-f2b6138b6e

Public calls

Time (UTC)CallerWalletFollowersMcap USD at callLinks
2026-10-21 02:46:42 UTCwhereslodo016FWh…j5EW81,78216067.0 @WheresLodo01 pump.fun
2026-10-21 02:46:48 UTCAkyTooWackyFEEJ…eiCi33320483.0 pump.fun
2026-10-21 02:47:33 UTCsolidarity21qSkh…Yzwt10118842.0 pump.fun
2026-10-21 02:47:37 UTCSpotAblazeIrisBHF4…sNJo24717921.0 pump.fun
2026-10-21 02:48:07 UTCsatoshipugamotoHqoo…xLXQ33620652.0 pump.fun

Timeline

8 of 201 events shown (first buy per wallet; all creator trades; calls; peak; last trade).

Time (UTC)EventWallet / callerSOLTokens (% supply)Mcap SOLTx / link
2026-10-21 02:44:19 UTCtoken created 4LXA…nx5C3FEdSE…R9f529
2026-10-21 02:44:20 UTCpeak market cap 295.68
2026-10-21 02:44:20 UTCcreator buy 4LXA…nx5C35.0577769230.77 (57.78%)131.253FEdSE…R9f529
2026-10-21 02:44:20 UTCearly buyer buy GYSH…JJGC4.230057358.83 (3.01%)148.766E1MbQ…ezXwaK
2026-10-21 02:44:20 UTCearly buyer buy CfPH…sZu81.59869308.57 (0.99%)155.286E1MbQ…ezXwaK
2026-10-21 02:44:20 UTCearly buyer buy CC2F…6xKC7.041018387.55 (4.10%)187.556E1MbQ…ezXwaK
2026-10-21 02:44:20 UTCearly buyer buy 7XQb…7YKD0.1532500.92 (0.05%)188.036E1MbQ…ezXwaK
2026-10-21 02:44:20 UTCearly buyer buy 237e…NJsS2.010369754.72 (1.04%)197.834rt8wB…c1zBMQ

Price impact (bonding curve, SOL market cap)

first mcap sol131.252
peak mcap sol295.679
peak time utc2026-10-21 02:44:20 UTC
last mcap sol31.663
drawdown from peak0.893

Supporting transactions

5 shown of 280. Every row can be checked on Solscan or any Solana node.

Time (UTC)SlotWalletRoleSideSOLTokensSignature
2026-10-21 02:44:20 UTC4594668304LXA…nx5Ccreatorbuy35.0577769230.76923FEdSE…R9f529
2026-10-21 02:44:20 UTC459466830GYSH…JJGCearly buyer (first 3 slots)buy4.230057358.82616E1MbQ…ezXwaK
2026-10-21 02:44:20 UTC459466830CfPH…sZu8early buyer (first 3 slots)buy1.59869308.56596E1MbQ…ezXwaK
2026-10-21 02:44:20 UTC459466830CC2F…6xKCearly buyer (first 3 slots)buy7.041018387.5536E1MbQ…ezXwaK
2026-10-21 02:44:20 UTC4594668307XQb…7YKDearly buyer (first 3 slots)buy0.1532500.91816E1MbQ…ezXwaK

Limitations

  • Bonding-curve trades on pump.fun only (decoded from public Solana data by our collector); trades after migration to a DEX and transfers outside the curve are not in P&L.
  • P&L is in SOL, before fees and priority tips; unrealized value uses the last bonding-curve price, which a large sale could not achieve.
  • Wallet links are statistical (shared creation-block buying, shared funding wallet, shared exchange deposit path); one person can use many wallets and unrelated people can share infrastructure such as bots.
  • Caller (KOL) call times are pump.fun home-feed callout times; we link the caller's public X profile and, where we captured it, the post. Telegram calls are not collected.
  • Exchange cash-out paths follow up to 3 hops of plain SOL/USDC transfers and stop at labeled exchange wallets; amounts are upper bounds of the traced wallet's money on that path.
  • Collector gaps (RPC drops) can miss a small share of trades; transaction signatures can be checked independently on Solscan or any Solana node.

Integrity

SHA-256 of the full pack: ec4db7c417dc6a46e9e97768b2da6a0f042376232ea7abf970ef84322aed7483
Retrieved/built at: 2026-10-23 18:13:35 UTC
Method: JSON of the pack without the "integrity" field, keys sorted, separators (",", ":"), UTF-8, no ASCII escaping. Verify with the JSON from /v1/forensics/case/TK-094ddbfeb6: python3 -c "import json,hashlib,sys;p=json.load(open(sys.argv[1]));p=p.get('pack',p);p.pop('integrity',None);print(hashlib.sha256(json.dumps(p,sort_keys=True,separators=(',',':'),ensure_ascii=False).encode()).hexdigest())" pack.json

Automated analysis of public blockchain data. Detectors report on-chain facts and patterns "consistent with" known manipulation techniques; they make no claim about the intent or identity of any person. Wallets are not linked to real identities. Exchange labels come from public datasets and can be wrong. Not legal, financial or investment advice. Corrections: admin@deepcounterfeit.com.