DEFADE Remembers: Every Scan Builds a Memory of the Hands Behind Rugs

Sep 2026 · 6 min read · updated 2 Nov 2026

Every rug starts the same way: a token nobody has seen, bought by wallets nobody has seen. That is the trick. A scanner that looks at each launch with fresh eyes sees new wallets, an empty history and nothing to hold against them. The people behind the launch are not new. They ran the last one, and the one before that.

So we stopped looking with fresh eyes. In July we launched DEFADE's memory: since then, every scan leaves a record, and every new token is read against everything we have already seen.

What a scan leaves behind

A scan already labels wallets. Bundle Detection finds the launch bundles, Token Snipers the first buyers, Fresh Wallet Detection the wallets made for the launch, Holder Network the insiders moving value between top holders, Sybil Band Clustering the wallets one funder set up. Before July, all of that was gone the moment the scan was. Now it is kept.

BUNDLERS

Every wallet caught buying in a launch bundle, on the token it bundled.

SNIPERS

Every wallet that bought in the first two minutes. Kept, but never held against a wallet on its own: launch snipers are bots that hit hundreds of tokens.

FRESH WALLETS

Wallets under a week old when they were seen holding. Bundlers run on fresh wallets, so they count.

INSIDERS

Top holders that moved tokens or coin to each other, or were funded by the same wallet, from two days before launch onward.

FUNDERS

Wallets that sent the starting balance to several holders of one token, and the wallets the bundlers or the creator funded.

THE OUTCOME

When a token we scanned later rugs, every wallet we saw on it is marked with that rug. That is what turns a list of wallets into a record.

Why memory beats a fresh look

Most signals on a scanner need the wallet to do something first: buy in a bundle, sell into the pump, move supply. By then you are already in. A memory flags a wallet before it does anything on this token. A wallet that bundled three launches that went to zero does not get the benefit of the doubt on its fourth.

Rug crews rotate tokens much faster than they rotate everything else. A new token costs nothing; a set of trusted wallets, funders and habits costs time. The memory is built around what they keep.

It also gets sharper on its own. Every scan anyone runs adds to it, so the hundredth launch from the same crew is read against the ninety-nine before it.

How we keep it fair

A memory that remembers the wrong things is worse than none. Three rules keep it honest:

A sniper is not an operator. Sniper bots turn up on rugs all the time because they turn up on everything. A wallet only counts as a repeat offender when it was on an earlier rug as a bundler, an insider or a funder, or on three or more rugs in any role but sniper.

An exchange is not a funder. Thousands of strangers withdraw from the same exchange wallet. Shared exchanges, bridges and payout services never link wallets together.

Unknown is not clean. A wallet we have never seen is exactly that. A first launch has no record, which is not the same as a clean one, and the cards say so.

Where you see it

On a scan, the Wallet Intelligence card on Overview reads it out: holders seen on earlier rugs, and in what role. On Wallet Lookup, paste any wallet and see its record across every token we have scanned: the roles it was flagged in and which of those tokens later died. And it feeds the rug pull probability, so a token full of known hands scores like one.

Update, 2 November 2026

Since this post went up, the memory has grown past single wallets. It now also keeps the operator bands a scan finds (wallets tied together by the same private funders) and the funders behind them, so a crew that rotates every wallet is still caught by the hands that pay them. It keeps a registry of bundler wallets per launch tool, and every token creator with the wallet that first funded it. Exit Playbook replays how the same hands' earlier launches ran, and Crew Radar sends a Telegram alert when hands we have seen launch a new token. All of it reads the same memory, described on the Module Guide.

Read a token against everything we have seen

Paste any Solana or EVM token address. Every wallet on it is checked against the memory in the same scan.

Scan a Token Now →

Related Guides

Everything DEFADE Checks on a Bundle

Insider Networks on Solana: How Connected Wallets Manipulate Memecoins

Why Tokens With Good Scores Still Rug

Share