← Manipulation patterns · How each detector works · API: /v1/forensics/case/TK-f0f8487806 (JSON), ?format=html (printable), .pdf — full pack with a trial or paid key · MCP tool forensics_case

Case file TK-f0f8487806: MetaAnthNVDAGoogleOPENAISPCX (MANGOS) — 5qNH…pump

Kind: token · built 2026-10-23 18:13:42 UTC from the analysis snapshot of 2026-10-23 17:48:48 UTC (window 72 h) · builder cases-1.0

Preview. The full pack (all transaction signatures, funding graph, per-wallet P&L, full timeline, printable HTML and PDF) needs a trial or paid API key: /signup (14-day free trial) or /pricing.

Summary

  • Token MANGOS (5qNH…pump) was created 2026-10-20 19:40:08 UTC by wallet E2gj…jR94 (wallet group C5e986322).
  • Market cap on the curve went from 35.8 SOL at the first trade to a peak of 184.7 SOL (17 s after creation) and 33.5 SOL at the last trade seen.
  • 10 creator/early/group wallets realized +28.85 SOL on the curve; 3 public call(s) in the window.
  • 9 wallets other than the creator bought 32.9% of supply in the creation slot 459349261 and the next 2 slots; 6 of them (28.8% of supply) are linked to the creator: they are in the creator's wallet group or also bought in the first slots of 2+ other launches by the same creator.
  • The creator wallet bought 12.5% of supply and sold 100% of it; first sell 0 s after creation, realized +9.48 SOL.
  • Within 15 minutes after the call by theghostd at 2026-10-20 20:09:00 UTC, 4 wallets linked to the creator (creator, its wallet group, linked early buyers) sold 3.80 SOL (first sell 347 s after the call, versus 0.00 SOL in the 15 minutes before it); the market cap then fell 55% at its lowest within 1 h.

Subject

mint5qNHR5NVn76yGWvpUv66fcJ8KnD3ePm4JVctqGPkpump
nameMetaAnthNVDAGoogleOPENAISPCX
symbolMANGOS
creatorE2gjcB5XrUwzNwi5KYvTPTX9iQmzXKYXCZDkuCnVjR94
creator groupC5e986322
bonding curveC7162AebGNgSWXrr1G31H7ZBrqHNgSu4GVj771Fr8PUp
created utc2026-10-20 19:40:08 UTC
creation sig4VcVzyVchZ…ZeCy6AQz29
creation solscanhttps://solscan.io/tx/4VcVzyVchZaBSZdcdRHCpE29Vm3UStHzRbJ4S3LhyBgyc12NE5vWQXpzMTJPgvtgNT3jrKYNoidGe2ZeCy6AQz29
coin pagehttps://pump.fun/coin/5qNHR5NVn76yGWvpUv66fcJ8KnD3ePm4JVctqGPkpump
impersonation alertno
manipulation score95
token socialstwitter: https://x.com/Mangosfof, website: https://otcdesks.cash/coin/5qNHR5NVn76yGWvpUv66fcJ8KnD3ePm4JVctqGPkpump
graduatedno

Detectors

Each detector reports on-chain facts only, with a confidence from 0 to 1 that the pattern is present (not a finding about intent or identity).

Bundled launch (linked wallets in the first slots) fired · confidence 0.92 (high)
9 wallets other than the creator bought 32.9% of supply in the creation slot 459349261 and the next 2 slots; 6 of them (28.8% of supply) are linked to the creator: they are in the creator's wallet group or also bought in the first slots of 2+ other launches by the same creator.
False-positive risk: Sniper bots buy in the first slots of many launches; we only count early buyers that the wallet-group rules link to the creator (the grouping ignores same-block buyers seen on more than 10 creators) or that bought early on 2+ other launches of the same creator. A bot that follows one prolific creator can still look linked.
Evidence transactions: 4UvXTs…K1Vm43 4UvXTs…K1Vm43 4UvXTs…K1Vm43
Creator sell-off fired · confidence 0.8 (high)
The creator wallet bought 12.5% of supply and sold 100% of it; first sell 0 s after creation, realized +9.48 SOL.
False-positive risk: Creators often sell their allocation early; a fast sell alone is common on pump.fun and is not proof of a scheme.
Evidence transactions: 2xp21x…6fduTp 3iTdZA…zrUk2S 2oxsbc…beUTvH
Wash-like trading not fired
1 wallet(s) bought and sold back the same size (within 2%) inside 3 slots at least 3 times, 6.04 SOL or 1.1% of the 575.3 SOL curve volume, with no lasting position; 0 of them are linked to the creator (0.00 SOL); 0 time(s) a linked wallet sold and another linked wallet bought the same size (within 5%) in the same or next slot.
False-positive risk: MEV/sandwich and arbitrage bots buy and sell back the same size within a few slots; we only flag this for wallets linked to the creator, but a linked wallet can still be running such a bot. Same-size hand-offs can be coincidence on busy tokens.
Evidence transactions: 24pFyK…9zSyy7 wrNbCP…H4AQZr 2RXbih…nmoR96
Coordinated sells after a call fired · confidence 0.9 (high)
Within 15 minutes after the call by theghostd at 2026-10-20 20:09:00 UTC, 4 wallets linked to the creator (creator, its wallet group, linked early buyers) sold 3.80 SOL (first sell 347 s after the call, versus 0.00 SOL in the 15 minutes before it); the market cap then fell 55% at its lowest within 1 h.
False-positive risk: Many traders react to the same call; wallets of a group selling at once can also be one bot managing several wallets for unrelated reasons.
Evidence transactions: 2gbgbY…ngXhU4 38ABdu…UpTgDm 3G43JT…Hm2VpA
Caller bought before the call and sold into it not fired
3 caller(s) held a position at the call but did not sell half of it into post-call buying within 30 min.
False-positive risk: A caller can buy because they like the token and post it later; selling after posting can be ordinary profit-taking. We report timing only.

Public calls

Time (UTC)CallerWalletFollowersMcap USD at callLinks
2026-10-20 19:43:46 UTCyouarenotyouBe6s…coaW3327876.0 pump.fun
2026-10-20 19:45:09 UTCbianca_blondeauE3Em…iWT113610654.0 pump.fun
2026-10-20 20:09:00 UTCtheghostdFnAQ…edfp1327449.0 pump.fun

Timeline

8 of 82 events shown (first buy per wallet; all creator trades; calls; peak; last trade).

Time (UTC)EventWallet / callerSOLTokens (% supply)Mcap SOLTx / link
2026-10-20 19:40:04 UTCtoken created E2gj…jR944VcVzy…6AQz29
2026-10-20 19:40:05 UTCcreator buy E2gj…jR943.9506124858181.76 (12.49%)35.814VcVzy…6AQz29
2026-10-20 19:40:05 UTCearly buyer buy Ettw…L3Qy1.285834599021.52 (3.46%)38.574UvXTs…K1Vm43
2026-10-20 19:40:05 UTCearly buyer buy HcRP…Dt4g1.252431356438.45 (3.14%)41.364UvXTs…K1Vm43
2026-10-20 19:40:05 UTCearly buyer buy 2YeF…rDJr3.993787029290.0 (8.70%)50.914UvXTs…K1Vm43
2026-10-20 19:40:05 UTCearly buyer buy 9naF…VCLt3.693966489009.29 (6.65%)60.6328niKD…1TEfru
2026-10-20 19:40:05 UTCearly buyer buy DWp3…zodq3.59554834724.74 (5.48%)70.928niKD…1TEfru
2026-10-20 19:40:05 UTCearly buyer buy 7UnU…TdBw0.99413734599.83 (1.37%)73.8828niKD…1TEfru

Price impact (bonding curve, SOL market cap)

first mcap sol35.808
peak mcap sol184.729
peak time utc2026-10-20 19:40:26 UTC
last mcap sol33.463
drawdown from peak0.819

Supporting transactions

5 shown of 100. Every row can be checked on Solscan or any Solana node.

Time (UTC)SlotWalletRoleSideSOLTokensSignature
2026-10-20 19:40:05 UTC459349261E2gj…jR94creatorbuy3.950617124858181.76374VcVzy…6AQz29
2026-10-20 19:40:05 UTC459349261Ettw…L3Qyearly buyer (first 3 slots)buy1.28582734599021.52064UvXTs…K1Vm43
2026-10-20 19:40:05 UTC459349261HcRP…Dt4gearly buyer (first 3 slots)buy1.25244431356438.44664UvXTs…K1Vm43
2026-10-20 19:40:05 UTC4593492612YeF…rDJrearly buyer (first 3 slots)buy3.99367987029289.99644UvXTs…K1Vm43
2026-10-20 19:40:05 UTC4593492619naF…VCLtearly buyer (first 3 slots)buy3.69392666489009.294828niKD…1TEfru

Limitations

  • Bonding-curve trades on pump.fun only (decoded from public Solana data by our collector); trades after migration to a DEX and transfers outside the curve are not in P&L.
  • P&L is in SOL, before fees and priority tips; unrealized value uses the last bonding-curve price, which a large sale could not achieve.
  • Wallet links are statistical (shared creation-block buying, shared funding wallet, shared exchange deposit path); one person can use many wallets and unrelated people can share infrastructure such as bots.
  • Caller (KOL) call times are pump.fun home-feed callout times; we link the caller's public X profile and, where we captured it, the post. Telegram calls are not collected.
  • Exchange cash-out paths follow up to 3 hops of plain SOL/USDC transfers and stop at labeled exchange wallets; amounts are upper bounds of the traced wallet's money on that path.
  • Collector gaps (RPC drops) can miss a small share of trades; transaction signatures can be checked independently on Solscan or any Solana node.

Integrity

SHA-256 of the full pack: af3f94230a809ffaa702114d362c916f12919a44bd3e5386b585c561cc241752
Retrieved/built at: 2026-10-23 18:13:42 UTC
Method: JSON of the pack without the "integrity" field, keys sorted, separators (",", ":"), UTF-8, no ASCII escaping. Verify with the JSON from /v1/forensics/case/TK-f0f8487806: python3 -c "import json,hashlib,sys;p=json.load(open(sys.argv[1]));p=p.get('pack',p);p.pop('integrity',None);print(hashlib.sha256(json.dumps(p,sort_keys=True,separators=(',',':'),ensure_ascii=False).encode()).hexdigest())" pack.json

Automated analysis of public blockchain data. Detectors report on-chain facts and patterns "consistent with" known manipulation techniques; they make no claim about the intent or identity of any person. Wallets are not linked to real identities. Exchange labels come from public datasets and can be wrong. Not legal, financial or investment advice. Corrections: admin@deepcounterfeit.com.