Scam advisoryIndependent on-chain reportsnapshot 2026-08-29 22:27 UTC

This IVY contract is an artificially botted market_

A token trading as IVY on Solana is using the name and TikTok handle @ivyvibing without authorization. Every number below was pulled live from Solana RPC, DexScreener and Jupiter's organic-flow classifier. The finding is not ambiguous: roughly 94% of this token's volume is machine-generated, and the wallet that created it has done this eight times before.

CONTRACT8CfMGsD2tEp8DN1xJ1FhSgx144c2AhqMDytJeew9pump
DEPLOYER5a1kLJrDxg2X3u4Zu5p72xWSdEB8p8cfVTNWvEs6AVT6

Not affiliated. The contract above is not the creator's token. The real one — launched on 31 Jul 2026 from a wallet shown live on stream — is 9m63AW5py9AQK218vxX4zEXp8gyFT2Cc9ZMnt6Fppump. See section 09 for the side-by-side chain comparison.

01 — Snapshot metrics

93.8%
Inorganic 24h buy volume
95.9%
Inorganic 24h sell volume
18 / 401
Organic buyers / traders
3.48x
24h liquidity turnover
-28.7%
Price change, 24h
478
Holders

02 — Bot vs. human flow

24h buy volume93.8% bot

$74,585 of $79,511 in buys came from wallets classified as inorganic.

24h sell volume95.9% bot

$80,249 of $83,716 in sells came from wallets classified as inorganic.

24h unique traders95.6% bot

Only 18 of 401 trading wallets showed organic behaviour.

6h buy volume96.0% bot

$1,138 organic out of $28,274 — the ratio does not improve on shorter windows.

Organic classification comes from Jupiter's flow model, which discounts wallets with bot-like timing, sybil funding graphs and no independent trade history. A healthy small-cap sits somewhere between 40% and 80% organic. This token sits at 6%.

03 — Findings

F-01critical

94% of buy volume is machine-generated

Jupiter's organic-volume filter classifies $4,925 of the $79,511 in 24h buy volume as organic. The remaining $74,585 comes from wallets exhibiting bot signatures: sub-second reaction times, uniform trade sizing, funding from a shared source and no independent trade history. Sell side is worse: $3,467 organic out of $83,716.

  • $ stats24h.buyVolume = 79,510.66 USD
  • $ stats24h.buyOrganicVolume = 4,925.44 USD
  • $ stats24h.sellVolume = 83,716.16 USD
  • $ stats24h.sellOrganicVolume = 3,466.67 USD
F-02critical

Volume is 3.5x the entire pool — classic wash loop

The PumpSwap pool holds $44,450 of liquidity yet reported $154,705 of 24h volume across 2,192 transactions. Real demand cannot cycle a pool 3.5 times in a day at a 478-wallet holder base without moving price up. Price instead fell 28.7%. That is the signature of volume manufactured to game trending boards, not volume from buyers.

  • $ liquidity.usd = 44,449.74
  • $ volume.h24 = 154,705.03
  • $ txns.h24 = 906 buys / 1,173 sells (PumpSwap)
  • $ priceChange.h24 = -29.04%
F-03critical

Serial deployer: 9 mints, 4 prior migrations

The deployer wallet 5a1kLJrD… has minted 9 tokens and pushed 4 of them through pump.fun migration. This is a production line, not a project team. The same wallet still holds 3.05% of supply — a live exit position sitting above a pool that is already down 29%.

  • $ dev = 5a1kLJrDxg2X3u4Zu5p72xWSdEB8p8cfVTNWvEs6AVT6
  • $ audit.devMints = 9
  • $ audit.devMigrations = 4
  • $ audit.devBalancePercentage = 3.05%
F-04high

More traders than the token has real holders

401 distinct wallets traded in 24 hours against a total holder count of 478. Genuine tokens accumulate holders as traders arrive. Here wallets pass through, leave nothing behind, and the holder count barely moves (+4.6% in 24h). Those wallets were routing volume, not buying a position.

  • $ stats24h.numTraders = 401
  • $ holderCount = 478
  • $ stats24h.holderChange = +4.60%
  • $ stats6h.numOrganicBuyers = 10 of 225 traders
F-05high

Two pools, 26% price gap, split liquidity

A second Raydium CLMM pool was opened a day after migration at a price 25.9% above the main PumpSwap pool, with only $10,676 of liquidity behind it. Anyone routed to the Raydium pool pays a quarter more per token for a market that cannot absorb an exit. Fragmenting liquidity across a stale, thin second venue is a known extraction pattern.

  • $ PumpSwap Ah81Xmr… — $0.0002740, $44,450 liq
  • $ Raydium CLMM DM9qw3W… — $0.0003450, $10,676 liq
  • $ Pool created 2026-08-25 (PumpSwap) vs 2026-08-26 (Raydium)
  • $ Raydium quote reserve = 1.258 SOL
F-06high

Impersonation: no official website, borrowed identity

The token's metadata carries no website and links a TikTok account it does not control. Its 'X' link is not an account but an X Community — a page anyone can spin up, which cannot be verified as belonging to any creator. The contract borrows a real person's identity to buy trust it has not earned. No Linktree, no signed statement, no wallet attestation from the named creator.

  • $ info.websites = [] (empty)
  • $ socials[] = X Community link, Telegram, TikTok @ivyvibing
  • $ No signed message from the named creator's wallet
  • $ Token metadata is mutable-by-convention off-chain JSON on IPFS
F-07medium

Concentration: top holders sit on 21.9% of supply

Top-holder concentration of 21.85% on a $262k market cap means roughly $57k of supply can hit a $44k pool. Mint and freeze authority are correctly revoked — that is the one genuinely clean finding — but revoked authorities do nothing to stop a coordinated cluster from selling into retail.

  • $ audit.topHoldersPercentage = 21.85%
  • $ mintAuthorityDisabled = true
  • $ freezeAuthorityDisabled = true
  • $ circSupply = 956,128,557.5 (Token-2022)

04 — Deployer wallet forensics

We pulled the deployer's last 1,000 signatures directly from Solana RPC. The wallet does not behave like a creator. It behaves like infrastructure.

78.8%
Failed tx, last 1,000
778
Tx in one day (09 Jun)
97.3%
Of those, failed
137.4 SOL
Wallet balance

788 of the last 1,000 transactions failed

A human wallet fails a transaction occasionally — slippage, a stale blockhash. A 78.8% failure rate is the signature of automated software firing continuously and losing most races. Normal retail wallets sit in the low single digits.

778 transactions in a single day, 757 of them reverted

On 09 Jun 2026 the wallet fired 778 transactions across a 17.7-hour window with a 97.3% revert rate and a median gap of zero seconds between signatures — 777 of the gaps were under ten seconds. That is a sniper or spam bot, not a person clicking buttons.

Dormant, then a perfectly flat launch cadence

After the June burst the wallet goes near-silent through July. It wakes on 15 Aug and settles into 19, 32, 30, 33, 31, 30 transactions per day from 24 Aug onward — a machine-steady rhythm spanning the exact window in which this token was minted, migrated and pumped.

It is funded, and it is not exiting empty-handed

The wallet holds 137.4 SOL (about $14,500 at $105.21/SOL) on top of the 3.05% of token supply it still controls. This is a financed operation with working capital, not an abandoned experiment.

Daily transaction count, deployer wallet

Log scale. Red marks the 09 Jun spam burst. The wallet then goes quiet for weeks and switches to a flat, near-identical daily cadence from 24 Aug — the launch window.

05 — Chain timeline

  1. 2026-08-25 17:57 UTC

    Contract minted on pump.fun by a wallet with 8 prior tokens.

  2. 2026-08-25 19:16 UTC

    Bonding curve completes in 79 minutes. Migrates to PumpSwap pool Ah81Xmr…

  3. 2026-08-26

    Second Raydium CLMM pool opened at a 26% higher price on 1.26 SOL of liquidity.

  4. 2026-08-26 → 08-29

    Volume sustained above $150k/day while holder growth stays near flat. Organic share never exceeds ~6%.

  5. 2026-08-29 (last 6h)

    Sells outpace buys 381 to 341. Price -24.9% in six hours. Liquidity -16.2%.

  6. 2026-08-29 22:27 UTC

    Snapshot taken for this report. Market cap $261,990, liquidity $44,450.

06 — How the play works

01

Borrow a real identity

Mint a token named after a creator with an existing audience, attach her TikTok, and point 'community' links at a page nobody can verify ownership of.

02

Force the bonding curve

Push the curve to completion in 79 minutes using controlled wallets so the token appears to graduate on genuine demand.

03

Manufacture the tape

Run wallet clusters buying and selling into themselves. Volume hits $150k/day and the token trends on aggregators. Fees are the only real cost.

04

Split the liquidity

Open a thin second pool 26% higher so routed or manual buyers overpay into a market with 1.26 SOL of depth.

05

Distribute into the noise

Sells outnumber buys 1,231 to 961 over 24h. Real buyers absorb supply while the tape still reads 'active'.

06

Repeat

The deployer has 9 mints and 4 migrations. When liquidity is drained here, the next contract launches from the same wallet cluster.

07 — Classic tales: the playbook this copies

None of this is novel. Every mechanic below is documented, litigated or academically measured. The right-hand column is how this specific contract scores against it.

Wash trading / volume bots

matches this token

One actor, or a ring of wallets it controls, buys and sells a token against itself to fake depth and climb trending boards. Round trips complete in seconds at near-identical sizes and net roughly zero profit before fees.

On-chain signature

Volume far exceeds what the holder base can produce; buy/sell counts near parity; price flat or falling despite record volume.

Documented case

Bitquery (2026) traced a large share of one day's entire Solana DEX volume to three wallets, one of which finished its job in 52 seconds.

Here: $154.7k of volume against a $44.4k pool and 478 holders, while price fell 28.7%. 94% of it classified inorganic.

Sybil clusters from one funding source

matches this token

Hundreds of fresh wallets are funded in near-identical amounts from a single parent address or CEX withdrawal, then all buy the same token to manufacture a holder count and a crowd.

On-chain signature

Cluster graphs fan out from one parent; wallets trade once and never return; trader count outruns holder growth.

Documented case

Bubblemaps' investigations of HAWK and comparable pump.fun launches repeatedly mapped insider wallets fanning out from a single funder minutes before launch.

Here: 401 wallets traded in 24h against 478 total holders and just 18 organic buyers. The traders pass through and leave nothing behind.

Bundled / sniped launches

partial match

Bundler bots submit dozens of buys in the same block as the mint, so insiders own a large share at launch price before anyone outside can react — then sell into the retail wave.

On-chain signature

Many distinct wallets landing buys in the identical slot as pool creation, funded from one source.

Documented case

Endemic across pump.fun launches; flagged in Solidus Labs' 2025 rug-pull report and tracked by public bundle-detection dashboards.

Here: The bonding curve completed in 79 minutes and the deployer wallet's own history is a documented sniper-bot profile. Slot-level attribution needs an archival indexer to confirm.

Soft rug (slow bleed) vs hard rug

matches this token

A hard rug drains the pool in one transaction. A soft rug is quieter: insiders sell their allocation into buy pressure over days while marketing keeps insisting everything is fine.

On-chain signature

Steady net outflow from insider wallets and shrinking liquidity while promotion continues, rather than one catastrophic block.

Documented case

Solidus Labs' 2025 report named soft rugs the dominant pattern on pump.fun, not the dramatic one-block drain people watch for.

Here: Liquidity is down 20.6% in 24h and 16.2% in the last six hours, sells lead buys 1,231 to 961, and the deployer still holds 3.05%. This is the soft-rug shape, in progress.

Serial deployers / token factories

matches this token

One wallet mints token after token from the same template, rugs most of them, and lets the rare survivor fund the operation. The branding changes; the machinery does not.

On-chain signature

A single deployer with many create calls and near-identical lifecycle curves across all of them.

Documented case

CoinGecko's study of 18.67M pump.fun tokens found ~69% stop trading the same day they launch and only ~5% survive 90 days — a curve driven by repeat deployers.

Here: Nine mints and four migrations from this one wallet, with the current token four days old and already down 29%.

Creator & celebrity impersonation

matches this token

Launch a token wearing a real person's name, likeness and socials so buyers assume endorsement. The named person is usually the last to find out and takes the reputational damage either way.

On-chain signature

Token metadata mirrors a public figure while no wallet controlled by that figure ever signs anything; links point at unverifiable community pages.

Documented case

$LIBRA (Feb 2025) cost investors roughly $251M with about $99M pulled by insiders within hours. $HAWK collapsed ~90% in an hour in Dec 2024 and produced a securities class action in E.D.N.Y.

Here: Uses the @ivyvibing handle, ships no website, and its 'X' link is an X Community page that anyone can create and nobody can prove they own.

Insider pre-launch allocation

partial match

Deployers and associates acquire a large share at negligible cost before public trading, then distribute into the price rise driven by everyone who came after.

On-chain signature

Wallets active in the first seconds after pool creation holding balances no organic early buyer could reach, later selling in coordination.

Documented case

The central allegation in the HAWK litigation: insider allocations disclosed only after the price had already collapsed.

Here: Top holders control 21.85% of supply — about $57k of overhang against a $44k pool. Whether those wallets are insiders needs cluster attribution we cannot prove from public RPC alone.

Volume boosting sold as a service

matches this token

Vendors openly sell wash-trading as a product: pay a fee, get pushed onto trending boards with manufactured volume and holder counts. It is market manipulation with a Telegram support desk.

On-chain signature

Volume spikes uncorrelated with unique-wallet growth; price flat or down while volume surges; the same service wallets recur across unrelated tokens.

Documented case

Bitquery (2026) identified reusable 'service' wallets performing this across many unrelated tokens on the same day.

Here: Volume up 178.6% over the prior day while holders grew 4.6% and price fell 28.7%. Volume and demand have fully decoupled.

Mint / freeze authority abuse

not observed

A retained mint authority lets the deployer print unlimited supply; a retained freeze authority lets them lock your tokens so you cannot sell at all.

On-chain signature

mintAuthority or freezeAuthority still set to a live address on the mint account.

Documented case

The mechanic behind the most abrupt hard rugs, where a token goes to zero in a single block.

Here: Both authorities are revoked. This is the one genuinely clean finding — and it stops none of the eight patterns above.

98.6%

of pump.fun tokens analysed showed scam-like or fraudulent trading patterns; only ~97,000 of ~7M ever sustained $1,000 in liquidity.

Solidus Labs, Rug Pull Report 2025
69%

of pump.fun tokens stop trading the same day they launch. Only about 5% are still alive after 90 days.

CoinGecko, 18.67M token study
~$251M

in investor losses from the $LIBRA impersonation launch alone, with roughly $99M withdrawn by insiders within hours.

Reuters / court filings, 2025

Base rates vary by methodology and blend outright fraud with tokens that simply failed. Treat them as directional context, not a verdict on any single contract — the verdict here comes from sections 02 through 04.

08 — Verify it yourself

Do not take this report on faith — that is exactly the reflex the scam relies on. Every claim above is reproducible from public endpoints.

09 — The official token vs the impostor

There is a real @ivyvibing token. It was minted on 31 Jul 2026 from a wallet the creator showed on a live stream, and it is a completely different contract from the one this report investigates. The chain history of the two deployer wallets is not remotely similar.

Official — IVY
9m63AW5py9AQK218vxX4zEXp8gyFT2Cc9ZMnt6Fppump
Dev wallet (live-streamed)
DwHv7Xa4s8CVRgShtNxySYYJA1H8oCV3Yibz6PJ1LNqv
Impostor — botted
8CfMGsD2tEp8DN1xJ1FhSgx144c2AhqMDytJeew9pump
Serial deployer
5a1kLJrDxg2X3u4Zu5p72xWSdEB8p8cfVTNWvEs6AVT6
MetricOfficialImpostor
Mint created31 Jul 2026 01:07 UTCAug 2026, weeks later
Creator walletDwHv…LNqv — first activity 30 Jul 2026, one launch5a1k…AVT6 — 9 mints, 4 migrations
Creator tx history239 lifetime txs, 2 failed (0.8%)1,000 sampled, 788 failed (78.8%) — bot signatures
Creator SOL balance0.07 SOL — spent, not stacked137.4 SOL (~$14.5k) extracted
Creator token balance30,912,067 IVY = 3.41% of supply — but only 6,612,766 (0.73%) is liquid3.05% of supply held back, all of it freely sellable
Creator supply locked24,299,301 IVY (2.68%) locked in a Streamflow stream created 02 Aug 2026 23:27 UTC, unlocking 31 Aug 2027 — 0 withdrawn so farNothing locked, no vesting contract of any kind
Metadata socialsivyvibing.com, x.com/Ivyvibing, t.me/frogqueenivy, TikTok + IGhandle text only, no website, no verifiable link
Mint / freeze authorityBoth revoked (null)Both revoked (null)
Market state at snapshot$6.4k FDV, $5.5k liquidity, 34 buys / 44 sells 24h — small and organic-sized$154.7k volume on $44.4k liquidity, ~94% inorganic

Read this before you buy anything. The official contract being real does not make it safe — it is a small, volatile memecoin trading at roughly $6.4k FDV with about $5.5k of liquidity and it fell ~51% in the last 24 hours. Nothing here is financial advice. The point of this section is identification only: 9m63AW5py9AQK218vxX4zEXp8gyFT2Cc9ZMnt6Fppump came from the creator's own wallet, 8CfMGsD2tEp8DN1xJ1FhSgx144c2AhqMDytJeew9pump did not.

10 — Same name, two completely different machines

Below, every bar is the same measurement taken on both contracts and both deployer wallets at the same snapshot. Red is the impostor. Green is the creator's own launch. You do not need to read the numbers — the shape tells you.

Deployer transactions that FAILED
78.8%
impostor
0.8%
official

788 of last 1,000 vs 2 of 239 — spam-retry loops leave this exact scar

Deployer signatures fired <10s apart
77.8%
impostor
4.6%
official

median gap 0s vs 49 minutes

Trades per unique trader / 24h
5.5x
impostor
1.6x
official

2,198 trades / 400 traders vs 78 trades / 49 traders

24h volume ÷ liquidity (turnover)
7.7x
impostor
3.1x
official

$165.5k on $21.6k vs $5.8k on $1.9k

Tokens minted by this deployer
9
impostor
2
official

4 migrations vs 1 — a factory vs a one-off

Deployer supply sellable today
3.05%
impostor
0.73%
official

the official dev holds 3.41% total, but 2.68% is locked in Streamflow until 31 Aug 2027 (0 withdrawn) — the impostor's 3.05% can be dumped at any second

Deployer activity per day — the tell

Humans are erratic. Schedulers are not. The impostor deployer fired an almost identical number of transactions every single day through the launch window; the creator's wallet looks like a person who logs on when they feel like it.

Impostor deployer — tx/day
19
32
30
33
31
30

19 / 32 / 30 / 33 / 31 / 30 — a flat line across the launch. Machine cadence.

Official deployer — tx/day
12
9
8
2
2
9
4
3
1
2

12 / 9 / 8 / 2 / 2 / 9 / 4 / 3 / 1 / 2 — bursts, gaps, quiet days. Human cadence.

One honest caveat. Jupiter's organic-volume filter currently scores the impostor "medium" and the official token "low" — because that score rewards size and liquidity, and the official token is tiny. By raw organic share, both read low. That is exactly why this section charts behaviour instead: failure rates, signature spacing, trades-per-trader and deployer history cannot be bought from a volume-boosting service, and on every one of them the two contracts land on opposite ends.

11 — The only real accounts

These are the authentic channels, and they are the only place the official contract is announced. Any other token, presale or DM offering allocation is not connected to them.