Sybil & Holder Quality Report — PSY
Wallet clustering, distribution integrity, and drain analysis
Generated Feb 10, 2026 at 21:19
30,882 token wallets analyzed
Transfer range: Jan 2 to Jan 15
Account opening range: Jan 2024 till Now

📋 Report Details & Methodology

🪙 Token & data ranges
Token address 2nP9yKQNSGQy851iyawDvBkzkK2R2aqKArQCKc2gpump
Token namePsyopAnime
Token symbolPSY
Launch dateJanuary 9 5:30PM
Account funding rangeJan 2024 till Now
Transfers rangeJan 2 to Jan 15
Methodology & scope
🎯 Risk Dimension: how it works

Plain language: Risk Dimension measures coordinated wallet behavior using three signals (fan-out/fan-in, burst timing, amount templating) and assigns a probability + category.

Token-specific scope:

  • Create Wallet — account‑opening funding (independent of token).
  • Pre-Fund & Buy & Exit / Drain — USDC/SOL before first buy and after each sell.
  • Receive & Sell & Buy & Send Token — SPL token only (e.g. PSY).

Time ranges: Create Wallet: Jan 2024 till Now. Transfer-based: Jan 2 to Jan 15. Update when regenerating for another token or window.

📐 Cluster min size, filter & sort

Minimum size (display/export) — clusters below min are excluded from table and CSV.

  • Create Wallet: 4+ wallets
  • Receive & Sell: 4+ senders
  • Buy & Send Token: 4+ recipients
  • Pre-Fund & Buy: 4+ wallets
  • Exit / Drain: 4+ wallets
  • SUPER: 2+ wallets
📦 Export limits & caps

Members per cluster (stored): 2,000. Program similarity: same 2k cap.

Top displayed:

  • Create Wallet, Receive & Sell, Buy & Send Token — 200 (risk-only)
  • Pre-Fund & Buy, Exit / Drain — 500
  • Super — 200
  • Full list includes clean

💡 Decisions This Informs

🚀Presale then launch

You've run your presale and are about to go live.

  • Use this report to allocate funds and decide what to mitigate
  • Liquidity, vesting, and exclusions informed by cluster risk
  • See where sell pressure and concentration live before launch
🔍Already live

No airdrop, presale or governance—goal is to uncover bad actors.

  • Clusters of wallets centralised to one person or group
  • They could flick the switch and dump at any moment
  • Don't be misled: many addresses can be one entity—know who's behind the clusters
🔍Who's Behind the Clusters
Uncover who controls coordinated wallets and where supply is concentrated. Know where a single flip could hurt the token—critical for tokens with no presale/airdrop.
📉Expected Sell Pressure
Cluster sizes and drain scores show how much coordinated selling to expect so you can plan ahead and prepare—know what may hit the market.
👥For Your Retail Holders
Key audit to safeguard holders' and formal round investors' funds. See if the token is dominated by coordinated clusters or genuine holders before you commit.
🏛️For Investors, Funds & VCs
For funds and VCs with token-holding clients: see how healthy or malicious a token's clusters are. Assess dump and sybil risk to advise and protect capital.
🛡️What to Mitigate
Identify which clusters are sybil or coordinated. Plan vesting, claim caps, or exclusions for high-risk clusters so they don't drive the first wave of dumps.
📅Vesting & Claim Design
If exit/drain clusters are big, allocate for longer vesting or staged claim streams. Reduces one-off dump risk and spreads sell pressure over time.
🎁Airdrop & Incentive Allocation
Cap or exclude high-risk clusters from airdrops and incentives. Allocate more of the budget to clusters that look like genuine and independent holders.
👁️Post-Launch Monitoring
Know which wallets are likely to dump vs hold. Prioritize support and communication for real holders; expect coordinated sells from flagged clusters.

🧠 Risk Dimension Specs (Fan, Burst, Template)

⚙️ Methodology (3 signals)
Signals

Fan (30 pts, 30d scale); Burst (40 pts, 10‑min bucket); Template (25 pts, amount dominance). Max 95 pts.

Probability

P = 1/(1+e^-(score-50)/10). Categories: ≥70 Confirmed; ≥50 Likely; ≥30 Suspicious; else Clean.

Who is counted

Create Wallet, Pre-Fund & Buy, Exit / Drain = wallets in all_wallet_addresses. Receive & Sell = recipient + senders (timing = recipient). Buy & Send Token = recipients (timing = source). Detected = Confirmed/Likely/Suspicious; Clean = Clean/N/A.

📐 Fan (scale)

How many wallets or sources link to a cohort in the last 30 days.

≥20030 pts
50–19920 pts
10–4910 pts
<100 pts
⏱️ Burst (timing)

How many cohort events fall into the same 10‑minute window.

≥5040 pts
15–4930 pts
5–1415 pts
<50 pts
📋 Template (amounts)

Dominance of one amount inside the same 10‑minute window.

≥80%25 pts
50–79%18 pts
20–49%10 pts
<20%0 pts

Cluster Analysis

Five risk dimensions across the wallet lifecycle. Select a table below to view coordinated clusters; expand any row to see wallet-level detail.

Wallets Analyzed
30,882
Wallets analyzed
High-Risk Clusters
1,210
Coordinated networks (detected only)
High-Risk Wallets
6,617
Wallets in detected clusters
Suspected Sybil
21.4%
High-risk wallets / Wallets analyzed
Detected 1,210 clusters across all risk dimensions

🔬 Detection patterns (used in tables below)

Common Funder Clustering
Farms bootstrap wallets from same source
Burst Funding Detection
Mass wallet setup before airdrops/claims
Amount Templating
Scripted distributions / identical funding
Internal Funding / Transfer Chains
Coordinated control + obfuscation of origin
Post-Receive Drain Pattern
Receive → sell quickly → consolidate to exits
Program Similarity
Shared programs → scripted/sybil behavior
Farm Initialisation
🪙
Create Wallet
Issuer meaning: "Wallets were created/funded in a coordinated way."
Used for: pre-screening / sybil scoring before distribution.
Staging & Token Acquisition
💰
Pre-Fund & Buy
Issuer meaning: "Wallets were prepared ahead of your token event."
Used for: identifying farms that spun up before claim/airdrop.
📤
Buy & Send Token
Issuer meaning: "One source sent token to many wallets — fan-out."
Used for: spotting distribution from a single controller.
Finalisation & Exit
📥
Receive & Sell
Issuer meaning: "Many senders sent token to same wallet(s) — fan-in."
Used for: spotting concentrated receipt / wash-in patterns.
💸
Exit / Drain
Issuer meaning: "Wallets like extractors: receive → dump → consolidate."
Used for: measuring toxic supply, deciding vesting/locks, post-mortems.
(Create → First PSY Buy)
(Receive SOL/USDC → First PSY Buy)
(First PSY Buy → Send PSY)
(Receive PSY → Each PSY Sell)
(Each PSY Sell → Send SOL/USDC)
Showing table
Top 0 Risk Clusters ·
Top 5 Programs (Detected Only)
Cluster size distribution
Cluster Classification Counts
How the Top 0 Clusters Are Chosen
🔍Step 1: Filter to clusters with size ≥ 4
📊Step 2: Sort by Time Distance + Detected
Step 3: Take the Top 0 Cluster Wallets
⏱️
Time distance
Sort by % wallets with time distance (desc). Tighter timing → stronger coordination.
📊
Fan / Burst / Template
Fan 30d scale; Burst 10‑min; Template amount dominance. Max 95 pts.
📐
Template + size
High template + low cluster size → higher bad-actor likelihood.
🔢
Other scores
Multi‑signal → stronger coordination; single‑signal → possibly one‑off.
🔗
Program similarity
High RMV + high similarity → strong sybil; high RMV + low → coordinated but diverse.
Cluster row tags
Warning Cluster Lvl 2
Both detected and clean; more detected than clean.
Warning Cluster Lvl 3
Both detected and clean; more clean than detected.
Warning Cluster Lvl 1
All clean (0 detected).
Router/Market/Fees
Size ≥25 both sides or label match; other tags hidden when shown.
Potential Fee/HFT/Whale
Size 6–24 both sides, <50% diff; other tags hidden when shown.
Clean Cluster
=100% of subrows Router/Market/Fees → override to Clean.
Sybil Candidate
Detected > 0, clean = 0, not Router/Potential Router.