Danger signal

Sybil-Funded Holders

Multiple top holders were funded by the same non-exchange wallet - fake demand, not real holders.

Analyzer: Distribution Analysis
Slug: sybil_funded_holders

What it means

Several of the token's largest holders trace their first funding back to the same source address (not a known exchange). It is one party splitting a bag across fresh wallets to manufacture the look of organic distribution - dozens of "holders" that are really one actor.

Why it matters

Holder count and distribution charts are the trust signals retail leans on, and a sybil cluster fakes exactly those. The supply looks spread out while a single operator controls it through puppet wallets, ready to dump in concert. It is the distribution-side version of a rug: the demand was never real.

How RektRadar detects it

RektRadar resolves each top holder's first inbound funding transfer and clusters them by funding source, excluding CEX hot wallets (so a cohort that all withdrew from the same exchange is not flagged). When several holders share one non-exchange funder, the cluster is raised as a sybil signal.

From our dataset

1,228
tokens carried this flag
957
of them classified scam
77.9%
of tokens with this flag end up classified scam
281
flagged in the last 30 days

Top brand-jacked tickers carrying this flag: $OMEGA, $XRP, $TRNRQ, $NOVLO, $GTAVI

Pool version of the flagged tokens that trade: V4 527 · V2 384 · V3 25

Snapshot from RektRadar's token_analysis database as of 2026-07-20.

Recent tokens with this signal

Loading recent tokens…

Analyze a token →