Pump.fun is adversarial by design. A significant share of activity on the platform is not organic price discovery — it is coordinated manipulation, bot noise, and deliberate traps set for retail participants. Alpha Leak runs a dedicated layer of adversarial detectors that identify these patterns and ensure the trading system never acts on manufactured signals.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/0xW1re/solvedocs/llms.txt
Use this file to discover all available pages before exploring further.
Threat summary
| Threat | Detection method | Response |
|---|---|---|
| Bundle / coordinated buy | BundleDetector (5s time windows) | Token flagged, bundle_confidence ML feature raised |
| Bot noise | BotDetector (3 behavioral patterns) | Wallet capped at alpha 30, is_bot ML feature set |
| Serial rugger | CreatorRiskScorer (rug rate, lifetime, insiders) | creator_risk_score ML feature raised, anti-signal trigger |
| Copy-trade follower signal | CopyTradeDetector (directional consistency) | Signal downweighted, originator vs follower resolved |
| Wash trading | Token risk scorer (buy/sell pattern analysis) | wash_trade_pct ML feature, anti-signal trigger at >30% |
| Exit liquidity trap | AntiSignalEmitter (smart wallets selling into retail) | Anti-signal emitted, open position force-exited |
| Crowded trade | SignalCrowdingDetector (tracked SOL vs curve SOL) | Score penalty up to 50%, result cached in Redis per token |
Bundle detection
Bundles are the most common form of coordinated manipulation on Pump.fun. A group of wallets — often controlled by the same operator — buys a token within the same few seconds, typically at or near launch. This creates the appearance of organic momentum while actually front-running the curve for a later dump. TheBundleDetector groups trades into 5-second time buckets and identifies clusters of 3+ wallets buying the same token in the same window. It then scores each cluster on two independent dimensions.
Amount uniformity — coefficient of variation (CV) below 0.3 means the buy sizes are suspiciously similar. Random wallets rarely buy the exact same SOL amount.
Rank continuity — a rank span at or below the wallet count means the buy ranks are consecutive. Consecutive buy ranks in a tight time window indicates the wallets transacted in rapid succession from the same source.
| Classification | Criteria | Strength |
|---|---|---|
same_slot_coordinated | Both uniformity and rank continuity pass | Strongest evidence |
similar_amounts | Uniform amounts, non-consecutive ranks | Moderate evidence |
time_window | Only time proximity, no other signals | Weakest evidence |
token_bundle_confidence and into the AntiSignalEmitter as an independent trigger.
Creator risk scoring
Not all creators are equal. TheCreatorRiskScorer builds a longitudinal view of every creator with 2+ tokens on-chain.
The most useful metric is the rug rate: the fraction of a creator’s tokens whose last trade occurred within 10 minutes of launch and that never graduated. A creator with a 90% rug rate has a consistent and deliberate pattern of launching tokens that die immediately — typically because the creator or insiders dump before any retail participation.
Additional signals computed per creator:
| Signal | Description |
|---|---|
| Serial velocity | Tokens per day over the last 30 days — high velocity combined with high rug rate is an extremely reliable indicator of malicious intent |
| Avg insider presence | Average count of insider wallets across the creator’s tokens |
| Avg bot buyer pct | Creators whose tokens attract almost exclusively bots are likely farming interaction metrics |
Anti-signal logic
TheAntiSignalEmitter is the last line of defense before capital is deployed. It scans every token with an active buy signal every 30 seconds, checking six independently computed risk signals.
The multi-trigger design is intentional. Any single metric can be noisy — a 70% bot buyer rate on a brand-new token might just mean no humans have heard about it yet. When 3 or 4 triggers fire simultaneously, the evidence is overwhelming.
Exit liquidity detection
The exit liquidity trigger deserves special attention because it is one of the most reliable indicators of a dump in progress. Detection follows a three-step pattern.Confirm prior smart-wallet buy signal
A token must have had smart-wallet buy signals in the last 15 minutes. This establishes that tracked wallets created the appearance of a good trade and may have drawn in followers.
Detect those same wallets selling
The same smart wallets that generated the buy signal are now selling — within the last 10 minutes. This is the reversal that makes the setup dangerous.