A Solana token presale collapsed after a bot farm used over 1,000 wallets to seize almost all tokens. Right here’s how the assault unfolded
A Solana presale erupted into controversy after a bot-driven pockets swarm grabbed almost your complete Moist token provide in a matter of seconds.
Organizers had been pressured to pause the launch, apologise to patrons, and arrange a brand new plan to verify actual customers are included.
The incident raised pressing worries about presale constructions, pockets screening and the affect of automated networks in early token occasions.
Sniper Assault Seizes Almost All Tokens
The Moist presale occurred on Jupiter, a Solana-based aggregator that always hosts high-demand launches. Quite than a good rush from common patrons, the sale lasted solely moments.
A swarm of latest wallets appeared on the precise time of the launch, every funded in the identical sample. Organisers later confirmed {that a} single actor took maintain of just about your complete provide by spreading funds throughout greater than 1,000 wallets.
Some actual dry shit occurred as we speak.
Humidifi began 6 months in the past from nothing, straight from the trenches of DeFi 1.0.
In these 6 months, for SOL-USD, we began quoting tighter and doing extra quantity than Binance. We didn’t kiss any ass or bend the knee to anybody. We began…
— HumidiFi (@humidifi) December 5, 2025
HumidiFi, the workforce behind the presale acted quick as soon as the problem grew to become clear. The workforce halted your complete launch, introduced a substitute token, and promised to reward verified patrons who tried to take part.
This being mentioned, the attacker will obtain nothing from the brand new distribution plan.
Bubblemaps Traces Over 1,000 Wallets to One Controller
Bubblemaps stepped into the chaos with an in depth breakdown of the wallets that joined the sale.
Their platform identified an enormous group of wallets that shared matching patterns. Out of 1,530 wallets, about 1,100 confirmed almost the identical habits.
These wallets appeared on the identical time, held comparable Solana quantities, had no previous exercise and obtained funding from a small group of supply wallets.
excellent news: the $WET presale was very hyped and lots of people needed to get in.
dangerous information: just some botters had been in a position to make use of bundled txns to snipe a considerable quantity of the provision in seconds.
excellent news: after discussing with the @humidifi workforce, we’ll discover a…
— Jupiter (🐱, 🐐) (@JupiterExchange) December 4, 2025
In keeping with Bubblemaps, funds moved from change accounts to a cluster of wallets that then unfold tokens to 1000’s of empty addresses. This created the phantasm of extensive participation, although one actor managed nearly all the pieces.
The workforce additionally mentioned one pockets cluster slipped and uncovered hyperlinks to a Twitter person often called “Ramarxyz,” who later posted on-line asking for a refund.
This element helped affirm that the sale had not been compromised by a random glitch however by a deliberate wallet-flooding scheme.
Associated Studying: Upbit Hack: Upbit to Resume Crypto Transfers After $37M Solana Hack
Latest Sybil Assaults Present a Rising Sample
This occasion was not remoted. A number of token launches throughout November confirmed comparable pockets flooding patterns.
One actor captured a big share of aPriori’s airdrop. One other cluster tied to Edel Finance grabbed a big portion of their very own provide, although the workforce denied wrongdoing and mentioned the tokens moved to a vesting contract.
These occasions level towards an increase in automated methods designed to recreation new releases.
For context, a Sybil assault occurs when one individual acts by many wallets. This sort of assault has turn out to be far simpler due to sooner chains and low cost transaction prices on the Solana community.
In all, this creates strain on groups to make use of stronger protection programs earlier than and diring airdrops.
HumidiFi’s upcoming sale will seemingly face robust consideration as patrons look ahead to proof that the fixes labored.