What Is Bundle Sniping on Solana? How Insiders Rig Token Launches
If you've ever bought a Solana memecoin right at launch and watched 5-10 wallets immediately dump on you, you've probably been a victim of bundle sniping. It's one of the most common and least understood manipulation techniques in the Solana memecoin ecosystem.
What Is a Bundle Transaction?
On Solana, a "bundle" is a group of transactions that are submitted to a block builder (like Jito) as a single atomic unit. All transactions in a bundle either execute together in sequence, or none of them execute. Critically, they execute in a guaranteed order within the block.
This is a legitimate feature of Solana's architecture — it's used for things like arbitrage and DEX routing. But in the context of memecoin launches, it's weaponized by insiders.
How Bundle Sniping Works
Here's the typical bundle snipe flow on a pump.fun or Raydium launch:
The token creator generates multiple fresh wallets (usually 5-20) and funds them from a common source, sometimes through intermediate wallets to obscure the connection.
When the token launches (liquidity is added to Raydium, or the bonding curve opens on pump.fun), the creator submits a Jito bundle containing the liquidity transaction AND buy transactions from all their sniping wallets — in one atomic package.
Because the bundle executes atomically, the insider wallets buy BEFORE any external buyer can — they're literally in the same transaction. This gives them tokens at the absolute lowest price.
As retail traders buy in and push the price up, the bundled wallets gradually sell their positions at profit. Because they bought at the floor, even a small pump gives them significant returns.
Why It Matters for Traders
Bundle sniping fundamentally shifts the risk profile of a token launch. When insiders control 20-50% of the supply from block zero, the token is already pre-loaded for a dump. The "community" launch is theater — the distribution was decided before anyone else could click buy.
A token where bundled wallets hold 30%+ of supply is statistically far more likely to rug than one with organic early distribution. The higher the bundle concentration, the greater the risk.
How to Detect Bundle Sniping
Bundle detection requires analyzing the first few transactions of a token's lifecycle. Here's what to look for:
Same-block buying: Multiple wallets buying in the exact same slot (or within 1-2 slots) of the liquidity event. On Solana, slots are ~400ms, so same-slot buying from different wallets is almost always coordinated.
Common funding source: Trace the SOL in each early buyer's wallet backwards. If they all lead back to the same wallet (or a small cluster of wallets), that's a bundle network.
Fresh wallets: Bundle wallets are typically brand new — created hours or minutes before the launch, with no prior transaction history.
Sequential execution: In Jito bundles, transactions execute in a predictable sequence. If you see a pattern of create → add liquidity → buy → buy → buy all in the same transaction ID, that's a bundle.
Not All Bundles Are Rugs
It's important to note that bundle sniping doesn't automatically mean rug pull. Some legitimate creators bundle the first buy to protect against external sniper bots — essentially sniping their own launch to ensure the creator allocation isn't front-run. The difference is in what happens after: does the creator hold, or do the bundled wallets dump quickly?
Look at the behavior pattern: bundled wallets that hold for days or weeks are less concerning than ones that sell within the first hour.
Detect Bundles Automatically
DeFade's bundle detection module traces funding sources, identifies coordinated buyers, and calculates total bundle supply percentage — all in one scan.
Scan a Token Now →Related Guides
How to Spot a Solana Rug Pull: 10 Red Flags
Insider Networks on Solana: How Connected Wallets Manipulate Memecoins