Sybil & Holder Quality Report

📋 Report Details & Methodology

🪙 Token & data ranges

Token address RNGRtJMbCveqCp7AC6U95KmrdKecFckaJZiWbPGmeta

Token nameRNGR

Token symbolRNGR

Launch dateJan 5 12pm

Account funding rangeJan 2024 till Now

Transfers rangeJan 2 to Jan 15

Methodology & scope

🎯 Risk Dimension: how it works

Plain language: Risk Dimension measures coordinated wallet behavior using three signals (fan-out/fan-in, burst timing, amount templating) and assigns a probability + category.

Token-specific scope:

Create Wallet — account‑opening funding (independent of token).
Pre-Fund & Buy & Exit / Drain — USDC/SOL before first buy and after each sell.
Receive & Sell & Buy & Send Token — SPL token only (e.g. RNGR).

Time ranges: Create Wallet: Jan 2024 till Now. Transfer-based: Jan 2 to Jan 15. Update when regenerating for another token or window.

📐 Cluster min size, filter & sort

Minimum size (display/export) — clusters below min are excluded from table and CSV.

Create Wallet: 4+ wallets
Receive & Sell: 4+ senders
Buy & Send Token: 4+ recipients
Pre-Fund & Buy: 4+ wallets
Exit / Drain: 4+ wallets
SUPER: 2+ wallets

📦 Export limits & caps

Members per cluster (stored): 2,000. Program similarity: same 2k cap.

Top displayed:

Create Wallet, Receive & Sell, Buy & Send Token — 200 (risk-only)
Pre-Fund & Buy, Exit / Drain — 500
Super — 200
Full list includes clean

💡 Decisions This Informs

🚀Presale then launch

You've run your presale and are about to go live.

Use this report to allocate funds and decide what to mitigate
Liquidity, vesting, and exclusions informed by cluster risk
See where sell pressure and concentration live before launch

🔍Already live

No airdrop, presale or governance—goal is to uncover bad actors.

Clusters of wallets centralised to one person or group
They could flick the switch and dump at any moment
Don't be misled: many addresses can be one entity—know who's behind the clusters

🔍Who's Behind the Clusters

Uncover who controls coordinated wallets and where supply is concentrated. Know where a single flip could hurt the token—critical for tokens with no presale/airdrop.

📉Expected Sell Pressure

Cluster sizes and drain scores show how much coordinated selling to expect so you can plan ahead and prepare—know what may hit the market.

👥For Your Retail Holders

Key audit to safeguard holders' and formal round investors' funds. See if the token is dominated by coordinated clusters or genuine holders before you commit.

🏛️For Investors, Funds & VCs

For funds and VCs with token-holding clients: see how healthy or malicious a token's clusters are. Assess dump and sybil risk to advise and protect capital.

🛡️What to Mitigate

Identify which clusters are sybil or coordinated. Plan vesting, claim caps, or exclusions for high-risk clusters so they don't drive the first wave of dumps.

📅Vesting & Claim Design

If exit/drain clusters are big, allocate for longer vesting or staged claim streams. Reduces one-off dump risk and spreads sell pressure over time.

🎁Airdrop & Incentive Allocation

Cap or exclude high-risk clusters from airdrops and incentives. Allocate more of the budget to clusters that look like genuine and independent holders.

👁️Post-Launch Monitoring

Know which wallets are likely to dump vs hold. Prioritize support and communication for real holders; expect coordinated sells from flagged clusters.

🧠 Risk Dimension Specs (Fan, Burst, Template)

⚙️ Methodology (3 signals)

Signals

Fan (30 pts, 30d scale); Burst (40 pts, 10‑min bucket); Template (25 pts, amount dominance). Max 95 pts.

Probability

P = 1/(1+e^-(score-50)/10). Categories: ≥70 Confirmed; ≥50 Likely; ≥30 Suspicious; else Clean.

Who is counted

Create Wallet, Pre-Fund & Buy, Exit / Drain = wallets in all_wallet_addresses. Receive & Sell = recipient + senders (timing = recipient). Buy & Send Token = recipients (timing = source). Detected = Confirmed/Likely/Suspicious; Clean = Clean/N/A.

📐 Fan (scale)

How many wallets or sources link to a cohort in the last 30 days.

≥20030 pts

50–19920 pts

10–4910 pts

<100 pts

⏱️ Burst (timing)

How many cohort events fall into the same 10‑minute window.

≥5040 pts

15–4930 pts

5–1415 pts

<50 pts

📋 Template (amounts)

Dominance of one amount inside the same 10‑minute window.

≥80%25 pts

50–79%18 pts

20–49%10 pts

<20%0 pts

Wallets Analyzed

10,615

Wallets analyzed

High-Risk Clusters

963

Coordinated networks (detected only)

High-Risk Wallets

2,998

Wallets in detected clusters

Suspected Sybil

28.2%

High-risk wallets / Wallets analyzed

Detected 963 clusters across all risk dimensions

🔬 Detection patterns (used in tables below)

Common Funder Clustering

Farms bootstrap wallets from same source

Burst Funding Detection

Mass wallet setup before airdrops/claims

Amount Templating

Scripted distributions / identical funding

Internal Funding / Transfer Chains

Coordinated control + obfuscation of origin

Post-Receive Drain Pattern

Receive → sell quickly → consolidate to exits

Program Similarity

Shared programs → scripted/sybil behavior

Farm Initialisation

🪙

Create Wallet

Issuer meaning: "Wallets were created/funded in a coordinated way."

Used for: pre-screening / sybil scoring before distribution.

Staging & Token Acquisition

💰

Pre-Fund & Buy

Issuer meaning: "Wallets were prepared ahead of your token event."

Used for: identifying farms that spun up before claim/airdrop.

📤

Buy & Send Token

Issuer meaning: "One source sent token to many wallets — fan-out."

Used for: spotting distribution from a single controller.

Finalisation & Exit

📥

Receive & Sell

Issuer meaning: "Many senders sent token to same wallet(s) — fan-in."

Used for: spotting concentrated receipt / wash-in patterns.

💸

Exit / Drain

Issuer meaning: "Wallets like extractors: receive → dump → consolidate."

Used for: measuring toxic supply, deciding vesting/locks, post-mortems.

📋 Report Details & Methodology

💡 Decisions This Informs

🧠 Risk Dimension Specs (Fan, Burst, Template)

Cluster Analysis

🔬 Detection patterns (used in tables below)