Insider Networks on Solana: How Connected Wallets Manipulate Memecoins

Feb 2026 · 9 min read

Most people think of a rug pull as a single person creating a token and running away with the money. The reality is more sophisticated. Many of the biggest Solana memecoin rugs are run by organized networks of wallets — insiders who coordinate across multiple addresses to accumulate, pump, and dump tokens while appearing to be separate, unrelated buyers.

What Is an Insider Network?

An insider network is a cluster of wallets that are connected through funding relationships — one wallet sends SOL to another, which sends to another, which buys a token. They operate as a single entity disguised as many independent wallets.

The goal is simple: control a large percentage of a token's supply across many wallets, making the holder distribution look healthy on surface-level scans, while maintaining the ability to dump everything at once.

How Insider Networks Operate

Pattern 1: The Funding Tree. A single source wallet sends SOL to 5-10 intermediary wallets, which each fund 3-5 buying wallets. The result is 15-50 wallets that all trace back to one source, but are two or three hops removed — making the connection harder to spot with basic tools.

Pattern 2: The Round-Trip. Wallet A sends SOL to Wallet B, which buys the token, then sells and sends SOL to Wallet C, which buys again. The same capital is recycled through different wallets to create the illusion of organic buying activity and inflate volume.

Pattern 3: The Coordinated Dump. All insider wallets hold during the initial pump, creating a false sense of "diamond hands" among holders. Then, within a 5-10 minute window, they all sell simultaneously — crashing the price before retail can react.

Pattern 4: The Cross-Token Network. The same wallet cluster operates across multiple token launches. They create Token A, rug it, fund new wallets with the proceeds, and launch Token B. Tracking these cross-token connections reveals serial rug operations.

Why Surface-Level Analysis Misses Insider Networks

Basic holder distribution checks only look at how many tokens each wallet holds. If an insider network splits 30% of supply across 20 wallets, each wallet holds only 1.5% — which looks perfectly normal. The concentration is invisible unless you trace the funding connections.

Similarly, simple "top 10 holder" checks miss networks that intentionally stay outside the top 10 by using more wallets with smaller positions. The manipulation is designed to pass basic safety checks.

How to Detect Insider Networks

True insider network detection requires graph analysis — mapping the flow of SOL between wallets and identifying clusters of connected addresses. The key signals are:

Shared funding sources: Multiple holders whose wallets were funded by the same address (or a small chain of addresses). This is the strongest signal — independent buyers don't share a common funding wallet.

Temporal correlation: Wallets that consistently buy and sell at the same times across multiple tokens. Real traders don't operate in perfect synchronization.

Fresh wallet clusters: Groups of wallets that were all created around the same time, all with similar initial SOL balances, all making their first trade on the same token.

Post-sale convergence: After selling, if profits from multiple wallets flow back to a single collection address, that confirms the network.

DeFade's insider network module uses force-directed graph visualization to map these connections, showing you exactly which wallets are linked and how much supply the network controls collectively.

What to Do When You Find an Insider Network

If insider network analysis reveals that 20%+ of a token's supply is controlled by a connected wallet cluster, the risk is significantly elevated. This doesn't guarantee a rug — some projects have legitimate team allocations split across wallets — but in the memecoin context, it's a strong reason for caution.

The most important action is to look at the network's behavior over time. Are they holding? Accumulating more? Or starting to sell? If the network starts offloading, the dump is likely coming — and you want to be out before it happens.

Map Insider Networks Instantly

DeFade traces funding connections between token holders and visualizes insider networks as interactive graphs — showing exactly who's connected and how much they control.

Scan a Token Now →

Related Guides

What Is Bundle Sniping on Solana? — a closely related manipulation technique used at token launch.

How to Spot a Solana Rug Pull: 10 Red Flags — the complete list of on-chain warning signals.

Whale Wallet Tracking — understand the difference between insider wallets and legitimate smart money.