Bundled Wallets
Multiple wallets controlled by one insider that buy a token at launch in a single coordinated transaction block to fake organic demand.
Definition
Bundled wallets are a set of wallets — often dozens — all controlled by the same person or group, that execute buys in the same transaction block at token launch. The technique lets insiders acquire a large percentage of the supply (often 20–50%) while making it appear on explorers as broad, organic demand from many independent buyers. Each wallet typically holds a small slice (0.5–3%) so no single address looks suspicious, but they were all funded from the same source wallet minutes earlier and move in lock-step. When the bundler decides to exit, every wallet dumps simultaneously, collapsing the price. Solana's low fees and fast block times make bundling cheap and easy. On-chain bundle detection looks for: wallets created the same day, funded from one common source, that buy in the same or adjacent slots at launch.
How bundling works on Solana
A bundler scripts dozens of fresh wallets, funds them all from a single source address, and fires buy transactions in the same block as the token launch — or in the first few blocks after. Because each wallet holds only 0.5–3% of supply, a raw holder list looks like healthy distribution. The funding graph tells the truth: one wallet, one moment, forty masks.
MemeAssist's risk engine logged bundling as the 4th most frequent rejection flag in its July–August 2026 telemetry — 160 tokens rejected in a single week. The concentration that results is functionally identical to a single whale holding 30–50% of supply, because all those wallets will sell at once.
Why it is dangerous
- Artificial price action: coordinated buys pump the chart at launch, attracting retail. The bundler's cost basis is effectively zero (they often receive tokens before the pool opens).
- Instant exit: all wallets can be scripted to sell simultaneously — the dump is a single automated event, not a series of individual decisions retail can front-run.
- Misleading holder counts: explorers show 40+ "holders" when it's one person. Concentration metrics that don't reconstruct the funding graph undercount real risk.
How to detect it
Look for wallets that were: (a) created within the same day, (b) funded from one or two source addresses, and (c) bought in the launch block or within the first few slots. MemeAssist runs this funding-graph analysis automatically. Manual detection requires tracing each large holder's source wallet on a block explorer such as Solscan and checking creation dates and funding transactions.
High bundler count is a hard disqualifier in most professional screening workflows — there is no legitimate reason for a community token to have its supply captured by one operator wearing dozens of wallet masks at launch.
Frequently asked questions
What percentage of bundled supply is dangerous?
Any bundle that lets one operator control 15% or more of supply is high risk. Our engine flags tokens where bundled wallets collectively hold over 10% of circulating supply, because a coordinated dump of that size is enough to collapse the price on a typical memecoin's liquidity depth.
Can a token have bundled wallets but still be safe?
Rarely. Some legitimate teams use multi-wallet strategies for operational reasons, but they disclose it. Undisclosed bundling at launch — especially with fresh wallets funded from one source — is a strong indicator of intent to dump. Treat it as disqualifying unless the project provides a credible on-chain explanation.
How is a bundle different from a sniper?
Snipers react to a launch in the open market, buying fast but independently and at market price. Bundlers coordinate before launch, often receiving tokens at no cost or buying in the same transaction as the pool creation. The key difference: bundlers have insider access; snipers are fast external traders.