Web app

How to read the bubble map, what each feature does, and how threat scores are built.

Node types & colors

Each node in the visualization represents a wallet or token, color-coded by its role in the network.

TokenyellowThe token being analyzed. Center of the graph.

HolderslateAn ordinary token holder with no coordinated-funding or launch-timing flag.

ConnectedtealHolders linked to one or more cabal funders.

Cabal FunderredWallet that funded multiple holders (CEX/launchpad pipes excluded).

SnipercyanBought within the first 10 blocks of trading.

BundledpurpleDetected in a Jito bundle cluster transaction.

FunderblueFunding source wallet traced via SOL transfers.

TargetgreenOriginal wallet being traced in wallet mode.

PoolgrayLiquidity pool / AMM. Infrastructure, not a real holder.

Features

Risk heatmapToggle heatmap mode to recolor all nodes by threat level. Critical wallets go red, low-threat wallets stay green, so the highest-risk areas of a network stand out immediately.

Wallet profilesClick any node for a full breakdown: portfolio holdings, funding source, recent activity, identity tags, and a threat score with contributing factors.

Cross-token deep scanDiscover what other tokens cabal wallets hold in common. Surface coordinated activity that spans multiple token launches.

Real-time pollingLive holder balance tracking with incremental updates. Watch positions change in real time as the chart auto-refreshes.

Trending discoveryBrowse trending and featured Solana tokens with market cap, price, and volume data. One click to scan any token.

Embed integrationEmbed scoped visualizations on your own site via a simple iframe. Customize view style, dimensions, and target address.

Browser extensionA Chrome extension that shows the bubble map inline on axiom.trade, gmgn.ai, and trade.padre.gg chart pages; auto-detects the token, draggable and resizable.

Threat scoring

Every wallet is assigned a threat score from 0 to 100 based on multiple behavioral and identity signals. The score determines the wallet's risk level and visualization color in heatmap mode.

LOW RISK

0-29

CAUTION

30-59

AVOID

60-100

Contributing factors

Identity tags (scammer / rugger / hacker via Helius)+40

Cabal funder status (funded 2+ holders)+25

Sniper detection (first 10 blocks)+20

Bundle membership (Jito bundle cluster)+15

Fresh wallet (created < 7 days ago)+10

Threat scores are heuristic. A high score means elevated risk, not confirmed malice.

Persistent forensics

Single-token scanners forget. scoped remembers across tokens, so a wallet's sniping, bundling, and rug history follows it, and a crew is recognized even after it rotates wallets.

Wallet reputationSniper / bundler / cabal-funder / rug-dev tags accumulate per wallet across every scan. A serial sniper that's hit 8 launches is tagged on the 9th, not treated as a stranger.

Holder PnL & win-rateTop holders are scored by realized SOL flow: winners (took profit) vs exit liquidity (underwater / dumping on you). Whale tiers size each holder at a glance: SHRIMPFISHDOLPHINSHARKWHALE

Rug-dev flagA deployer that has rugged a prior tracked token carries a RUG DEV flag into every future launch: cross-token dev accountability, not a one-shot guess.

Recycled X accountsAccounts are keyed on their immutable X user id. Two different @handles on one id = the same operator recycling an account. Surfaced as RECYCLED with the prior handles on any token that links it.