Blockchain analytics firm Bubblemaps has identified the April 21, 2026 launch of the MYSTERY memecoin as an alleged case of organized market manipulation, after tracing a cluster of roughly 90 wallets that acquired about 90% of the token supply at genesis. The firm said those wallets were funded from a single address and later sold part of their holdings, triggering a sharp market reversal. In Bubblemaps’ view, the token’s launch was dominated by coordinated supply capture, not open market demand.
The findings raise immediate questions for token issuers, decentralized exchanges, custodial services and surveillance teams. Bubblemaps described the pattern as “organized sniping” and a “textbook scam,” pointing to a structure in which early wallet coordination gave one group overwhelming control of liquidity before retail traders entered the market.
$MYSTERY is a textbook scam
90 fresh wallets sniped 90% of the supply at launch
Block KOLs that promoted this garbage (some were paid) 🧵 pic.twitter.com/uCgOoypSqZ
— Bubblemaps (@bubblemaps) May 5, 2026
A Single Funding Source Behind 90 Wallets
Bubblemaps traced the accumulation to one funding address, identified on-chain as 0x544E. That address withdrew 20 ETH from a centralized exchange before distributing funds across the 90-wallet cluster. Many of those wallets were newly created for the launch, and they moved quickly to purchase MYSTERY during its DEX debut on April 21. The shared funding trail is the core signal of coordination in the firm’s analysis.
The wallets accumulated approximately 90% of MYSTERY’s total supply almost immediately. That level of concentration left the market structurally vulnerable from the start, since a single coordinated cluster effectively controlled the available float. For retail buyers, the launch did not offer a neutral distribution environment. It created a market where price discovery was shaped by wallets holding nearly all of the supply.
After the initial accumulation, the cluster sold part of its holdings and realized around $100,000 in proceeds. Even after that partial exit, the wallets still retained roughly 40% of the outstanding tokens, preserving their ability to influence liquidity and future price action. The sell-off was not a full exit, but a controlled reduction that left the group with meaningful residual market power.
Retail Traders Caught in a Liquidity Vacuum
The coordinated selling coincided with a rapid price collapse. Bubblemaps reported that MYSTERY fell about 75% from peak to trough, leaving retail participants who bought into the post-launch run exposed to steep losses. The decline showed how quickly concentrated genesis ownership can turn into a liquidity vacuum when early holders begin selling into market momentum.
The episode highlights three connected vulnerabilities: concentrated token ownership at launch, insufficient pre-listing or DEX launch vetting, and limited real-time detection of coordinated wallet behavior. The speed of execution, consistent with bot-driven sniping, reduced the window for human intervention and made the accumulation harder to counter in real time.
Bubblemaps’ findings point to a clear control priority: early detection of clustered wallet funding. When multiple new wallets receive capital from a common source, particularly after a centralized exchange withdrawal, that pattern should trigger enhanced review. Funding provenance can reveal manipulation risk before price damage becomes visible.
Bubblemaps’ description of the event as a “textbook scam” also shows how on-chain evidence can support operational classifications of market manipulation. The issue is not only that a few wallets bought early. It is that the funding source, timing, supply concentration and subsequent selling pattern together suggest coordination and intent under common market-surveillance definitions.
The implications extend beyond MYSTERY. Issuers and decentralized exchange operators face reputational and counterparty-risk exposure when launch mechanics allow one cluster to control supply. Custodians and trading platforms should reassess liquidity assumptions for newly listed tokens, especially where simultaneous buys from newly funded wallets appear. For compliance officers, stronger pre-listing diligence and faster escalation protocols are now essential safeguards against coordinated extraction at launch.