Solana WET presale hijacked by Sybil wallets; HumidiFi relaunch
A Solana presale for the Wet (WET) token was disrupted after a reported bot farm used more than 1,000 wallets to capture nearly the entire allocation within seconds, prompting organizer HumidiFi to cancel the launch and reset the process.
The sale, conducted via decentralized exchange aggregator Jupiter, sold out almost immediately. Organizers said genuine participants were effectively unable to buy because a single actor controlled the majority of purchases.
HumidiFi, a Solana automated market maker (AMM) and the team behind the sale, confirmed the incident and said it will issue a new token. The team plans a pro-rata airdrop for Wetlist and JUP staker buyers while excluding the wallets identified as part of the snipe, and stated it will hold a new public sale on Monday.
Bubblemaps points to suspected presale sniper after tracing more than 1,000 wallets
On Friday, blockchain analytics platform Bubblemaps said it had identified the entity behind the activity after detecting unusual clustering of wallets during the token sale.
In a thread on X, Bubblemaps reported that at least 1,100 of the 1,530 participating wallets showed identical funding and activity patterns, indicating they were likely controlled by one actor.
Bubblemaps CEO Nick Vaiman said the analysis showed numerous new wallets with no prior on-chain history, funded by a small set of sources within a narrow time window and with similar Solana (SOL) amounts, pointing to coordinated behavior.
Bubblemaps added that the alleged sniper funded thousands of new wallets from exchanges, with many receiving 1,000 USDC (USDC) shortly before the sale. The firm said one wallet cluster “slipped,” enabling a link to the X handle “Ramarxyz,” who later posted on X to request a refund.
Sybil attacks flagged as a critical risk to token launches
The incident follows similar Sybil-style events in November. On Nov. 18, a single entity claimed 60% of aPriori’s APR token airdrop. On Nov. 26, wallets linked to Edel Finance allegedly captured 30% of EDEL tokens; the project’s co-founder denied sniping and said the tokens were placed in a vesting contract.
Vaiman said Sybil attacks are increasingly common across presales and airdrops, though patterns vary. He recommended teams employ Know Your Customer (KYC) procedures or algorithmic Sybil detection, and consider manual reviews of participants before token allocations. He characterized Sybil activity as a critical security threat that warrants dedicated internal resources or specialized third-party support.
Stay informed, read the latest news right now!
Disclaimer
The content on TrustsCrypto.com is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency markets are highly volatile, always do your own research before making decisions.
Some content may be assisted by AI and reviewed by our editorial team, but accuracy is not guaranteed. TrustsCrypto.com is not responsible for any losses resulting from the use of information provided.
