Everything DeFade Checks on a Bundle
"Bundled" is one word on a scanner, but behind it sit a dozen separate tests. Some catch a launch bundle in the same transaction, some follow the money back to a shared funder, and some keep watching the supply after it leaves the bundle wallets. This post lists every check DeFade's Bundle Detection module runs, on Solana and on every EVM chain we cover (Ethereum, Base, BSC, Robinhood Chain, Arc and HyperEVM), and what each one means for you.
If you are new to the idea, start with what bundle sniping is.
Which wallets count as a bundle
Every early buyer is tested against a list of links, strongest first. A wallet joins the first group it matches and is counted once, so no buy is ever counted twice. A group needs at least two wallets.
One transaction delivers the token to two or more wallets. On Solana that includes a buy split across wallets as it lands; on EVM chains it is usually a multicall bundler contract. Nothing links wallets more tightly than this.
Solana: one launch buyer spreads its bag across a set of fresh wallets right after buying, so the holder list shows many small holders that are really one.
Solana: one wallet signed and paid for buys that landed in three or more other wallets.
Solana: buys in the same slot that also paid a tip to Jito's block engine. Groups with three or more tipped transactions rank higher than a tipped pair, and higher again when most of the wallets are fresh.
EVM chains: two or more buyers whose first funding arrived in the same disperse or multisend transaction.
We trace each buyer back to its oldest funding. Buyers that share a first funder form a group, and so do buyers whose funders share a funder of their own, one hop further back. When that funder is the token's creator (on EVM chains, also the wallet that added liquidity), the card says the bundle was paid for by the dev. Exchange hot wallets never count as a shared funder, since thousands of unrelated people withdraw from them.
Solana: exchange withdrawals don't link wallets on their own, but three or more wallets withdrawn from an exchange in matching amounts (within 1%) inside half an hour do.
Three or more buyers in one slot or block inside the launch window. On Solana a pair in one slot also counts, at lower confidence, because a pair is often the visible edge of a larger set. On EVM chains, two wallets in consecutive block positions with the same gas price to the wei and equal spend are marked BOT PAIR. Busy, long-lived wallets acting together are marked BOT FLEET. Both are shown on the card for context but left out of every bundle figure.
Solana: four or more buyers whose wallets were created within 24 hours of launch.
Buys of the same size: within 0.01 SOL of each other inside five seconds on Solana, or three or more near-identical buys inside ten minutes on EVM chains.
Wallets already recorded bundling other launches, flagged harder when half or more of those launches went on to rug. A group that contains known bundlers also gets a confidence boost, and wallets that keep turning up together across tokens are linked as repeat buyers.
When we look: launch, delayed and late
The launch window is the first 3 minutes on Solana and the first 5 minutes on EVM chains, measured from the first trade against a pool, not from contract deployment. Bundlers know this, so many wait. We check three phases:
Launch: everything above, inside the window.
Delayed: a sweep of the first 24 hours for bursts of coordinated buying and for "ladders" of six or more buys within 30 seconds. A delayed same-block group with no other link is scored lower, because busy blocks happen by chance.
Late cohorts: we start from today's holders and work backwards, looking for a set of wallets that share a funder (at least 60% of them) and were built up over an hour or more. This is how a slow accumulation shows up long after launch.
When a meaningful part of the bundled supply was bought after the window (at least 0.5% of supply and a quarter of the bundled figure), the card changes its label from "Bundled at launch" to "Bundled" and says how much came later and how many hours in.
How much they bought
The headline figure is the share of total supply the bundle groups bought. Bundles that buy, sell and buy again can add up to more than the whole supply, so past 100% we report the most they held at any one time instead. The card then reads "bought up to X% of supply at once", and no card ever claims a token is "100% bundled". Every other DeFade module that mentions bundles, from the rug pull probability to the verdict, uses this same figure.
What they still hold, and where it went
Buying is half the story. The other half is whether that supply can still be dumped on you.
Bundled now: what the bundle wallets still hold, plus supply rotated to wallets that bought as the bundles sold, plus holders the same funders seeded. If some balances can't be read during a scan, the card shows the figure as a minimum and says how many wallets were unread, rather than guessing.
Transferred, unsold: supply the bundles sent to other wallets that has not been sold or returned since. Moving tokens to a new address is the oldest way to make a bundle look closed, so we follow the recipients and count what they still hold. This figure never goes above the bundled figure.
Exits with no DEX sell: when supply leaves the bundle wallets without a sale we can see, we treat it as probably moved, not sold.
Recycled proceeds: on Solana, whether SOL from the bundles' sales went to fresh wallets that bought back in.
Bundle Detection does not print a total "sold" figure. Each group's row shows a small bar of held, sold and sent on, so you can see how the position moved without a sold figure being read as "safe".
Red flags in how the bundle was built
Funded together: three or more insider wallets funded within the same minute, up to a week before launch.
Prepared in advance: most of four or more insider wallets funded a day or more before launch.
Bot-like buying: six or more launch buys on a steady rhythm, the mark of a script.
Passed through throwaway wallets: recipients that passed the supply on again.
Disguised handoffs (EVM): supply sold and bought back in the same transaction to hide a transfer as trades.
Repeat offenders: wallets seen in other launches made with the same launch tool. The card also names the launch or bundling tool when it can identify one.
How it is rated
Solana: CRITICAL above 25% bundled, or a dev-funded group above 8%, or a Jito group with more than 10% bundled. HIGH above 12%, or any dev-funded or Jito group. MODERATE above 4%. LOW for any smaller group.
EVM chains: CRITICAL above 30% or a large dev-funded group, HIGH above 15% or any dev-funded group, MODERATE above 5%. We also rate the bundles' share of the tokens actually trading (CRITICAL at 50%, HIGH at 25%, MODERATE at 10%) and use whichever rating is higher.
A bundle that has mostly left is less dangerous than one still sitting on supply. When less than 10% of supply is still with the bundles (held, transferred and unsold, or rotated), the rating is capped at HIGH. If they have also sold at least half of what they bought, it is capped at MODERATE. The card says when a cap applied and why.
In the rug pull probability, what matters most is what the bundles still control: the weight climbs from 3 points at 1% held to 50 points above 50%. Supply that was moved and never sold is scored as a hidden position, not a closed one. Red flags, known bundlers and the launch tool add their own weight. If the scan could not reach the launch transactions, the score says bundles may be hidden, not absent.
Bundles after launch
Pro members also get Historical Bundle Detection. It finds the days a token's volume spiked (more than 2.5 times its weekly average and over $50k, or over $1M) and checks each spike for same-block and same-funder buying, so a pump organised weeks after launch doesn't go unnoticed.
What we don't call a bundle
A creator handing out its own launch buy is reported by the Dev Wallet Tracker, not Bundle Detection. Bot pairs and bot fleets are shown but not counted. A clean result says exactly what was checked: the first buyers share no funder, no transaction and no block.
Run every check in one scan
Paste any Solana or EVM token address and Bundle Detection runs everything above in seconds.
Scan a Token Now →Related Guides
What Is Bundle Sniping on Solana?
Insider Networks on Solana: How Connected Wallets Manipulate Memecoins