[work in progress, updated continually]

Investigation 1: Coordinated VULT launch buying

The VULT test wallet JP acknowledged and 26 launch buyers each sent 20% of the tokens they bought to the same destination.

The 26 wallets spent 260,000 USDC across both opening rounds. Including the test buy, the group acquired 1.57% of the supply and later sold 87.68% of its purchases for about $312,715.

1

Project administrators enabled the early buy

The whitelist determined which wallets could buy. A project administrator added the pool and the test wallet before its 1,000-USDC purchase, then removed both.

JP, @jpthor · 27 October 2025, 11:41:29 UTC
THE LAUNCHLIST IS SET

The post also included the test screenshot. Original X link · Archive · Saved copy

All 27 wallets were on the 1,149-address VULT list signed under JP’s GitHub account and on the earlier WEWE whitelist. The WEWE list establishes eligibility.

UTCRecorded actionTransaction
26 Oct 14:00:23Token owner 8e247 activated the current buyer list.Activation
27 Oct 10:34:35Administrator 9ad16 added the trading pool to the ordinary address list, enabling the early route.Pool admitted
27 Oct 10:39:11The same administrator submitted a 500-address batch, including af084; 488 addresses were newly added.Buyer admitted
27 Oct 10:55:47af084 bought 1,000 USDC of VULT, at position 6 in this block.Test purchase
27 Oct 10:55:47The administrator removed the pool at position 109 in that same block, closing the route.Pool removed
27 Oct 11:18:11The administrator removed af084 itself.Buyer removed
Administrator actions and purchase, reconstructed from signed transactions and successful receipts. Positions are zero-based transactionIndex values.

The early route also worked for another approved wallet, which bought twice. A historical simulation reproduced access for a different funded, approved wallet.

Signed project list · Preserved pinned source

The four source workbooks

SourceDistinct addressesOriginal sourcePreserved workbook
Earlier VULT list labelled Outdated1,100Original Google SheetExact XLSX export
WEWE1,149Original Google SheetExact XLSX export
Original VULT1,485Original Google SheetExact XLSX export
Later VULT activation1,368Original Google SheetExact XLSX export
Retrieved 27 October 2026. These exports are not immutable snapshots of a 2024 or 2025 launch-day state. The signed historical project code and on-chain admission records supply the separate historical evidence. Exact SHA-256 hashes · All 27 wallet rows as CSV
2

JP’s screenshot matches the test buy

JP posted the same transaction screenshot on Telegram and X. On X he said the team had tested the contracts. The screenshot’s fee figures match exactly one of the 211 transactions in the block: af084’s 1,000-USDC buy.

JP · 27 October 2025, 11:33:54 UTC
fyi these are the right gas settings!

Telegram message 756

Telegram message 756, dated 27 October 2025, 11:33:54 UTC in the export. The screenshot shows local time. Capture time unverified.
Telegram message 756, dated 27 October 2025, 11:33:54 UTC in the export. The screenshot shows local time. Capture time unverified. Original source
JP, @jpthor · 27 October 2025, 11:41:29 UTC
WE DID SOME SMALL TEST TRANSACTIONS TO VERIFY THE CONTRACTS WORK

Original X link · Archive · Saved copy

Wayback rendering captured 28 October 2026. Original post: 27 October 2025, 11:41:29 UTC.
Wayback rendering captured 28 October 2026. Original post: 27 October 2025, 11:41:29 UTC. Original X URL (currently unavailable) · Archived source · Preserved original post
Original X attachment. It matches the Telegram attachment byte for byte.
Original X attachment. It matches the Telegram attachment byte for byte. Original X URL (currently unavailable) · Archived source · Preserved original post
Field visible in the imageaf084’s 1,000-USDC purchase
Gas limit500,000
Gas used164,226
Gas price21.111901002 gwei
Priority fee21 gwei
Maximum fee400 gwei
Transaction fee0.003467123053954452 ETH
The full numeric comparison matches exactly one of the 211 transactions in the block: af084’s early buy.
3

VULT promoted a $10,000 buying cap

VULT’s launch announcement described the $10,000 cap both per wallet and per user.

Vultisig official account · 25 October 2025
Distribute $VULT to as many people as fair as possible

Launch article Original source · Archived source (indexed; replay not verified) · Preserved original post

The cap was 1,000 USDC in the first hour and 10,000 USDC total after that. Immediate selling was allowed.

4

26 wallets bought at both round openings

On 27 October 2025, each wallet spent 1,000 USDC in the first round and 9,000 USDC in the second. Each round’s 26 buys landed in one block.

All 52 purchases
Each amount links to its purchase. First round: block 23,668,637. Second round: block 23,668,942.
5

All 27 wallets paid 20% in the same block

At 12:00:47 UTC on 28 October, the test wallet and the 26 buyers each sent one fifth of their purchased VULT in 27 consecutive transactions with identical fee settings. The test wallet was at position 54.

All 27 payments and forwarding transactions
PositionBuying walletVULT boughtVULT paidRoute to receiving wallet
390xc19a78…fbef5758,244.32130911,648.864262via 0x7cd173…2fe6cf
400x631cba…f14a0358,272.94291011,654.588582via 0xae8596…3d15c5
410x70a3bc…bd697e58,759.46717411,751.893435via 0x923535…e04154
420x5fb00f…9411bc57,022.67475811,404.534952via 0x6fee9f…7d1232
430x2a1b66…d5c1d859,637.18581211,927.437162via 0x5d9b82…9eed70
440xaaae85…e491c958,798.24481811,759.648964via 0xd8c360…d0469b
450xf128c5…92497160,140.23988912,028.047978via 0xc05dc2…3a036f
460x25b84f…068a0a60,333.64141912,066.728284via 0x0cd598…c7be8d
470xc4ed1d…dafc2656,615.91662611,323.183325via 0x1101c7…808dd1
480xb74ee4…ad533159,065.47466611,813.094933via 0x02ab9d…f4ed97
490x7dbc21…a8d70f61,679.75860412,335.951721via 0x69026d…5b11e3
500xe8ace2…b33f4556,385.00139611,277.000279via 0x81d7e5…dae838
510x22ae88…74636160,725.71571412,145.143143via 0x487c52…4c6926
520x2b7437…9e641e59,624.38508411,924.877017via 0x74b22b…e2e94e
530x07987d…38377758,757.17241911,751.434484via 0xf80101…45f003
54af084 — test wallet32,438.0672226,487.613444Direct to 0x9f8258…75ac97
550x64dbd4…4b062a58,759.80234811,751.960470via 0x52b928…4bff85
560xf8fc64…315fbc58,228.31496311,645.662993via 0x05232f…f8a11a
570xd61910…95b3cf61,746.05798512,349.211597via 0xb07f26…5e0910
580x9d51ef…bb93d160,703.54339812,140.708680via 0x888c89…083202
590xd47e3b…5abece59,092.37534711,818.475069via 0x9bc892…ef69a8
600xced3ea…6d446a56,155.50120211,231.100240via 0xf6f8f3…1567e3
610x88e48f…edd10c61,676.53823412,335.307647via 0x6b949b…89448d
620xeb56e2…4004e758,604.61220211,720.922440via 0xc54e94…382cc3
630x711d74…4efd1f60,193.04212712,038.608425via 0x1bc4c0…0016e7
640x8bb114…e5068d61,153.45706412,230.691413via 0x25a39c…1a2e8d
650xbe5412…5c08eb58,117.64768911,623.529538via 0x9b7e9b…ee6d97
Actual block order. Token values are displayed to six decimals; each transfer equals one fifth rounded down to the smallest token unit. Every payment amount links to its transaction.

The test wallet paid 0x9f8258…75ac97 directly. The other 26 used forwarding wallets. The address received 314,186.22 VULT in total.

Earlier launch phases restricted wallet-to-wallet transfers.

Complete payment block

6

The recipient funded all 26 forwarding wallets

At 10:51:23 UTC on 28 October, the receiving wallet sent ETH for transaction fees to exactly the 26 forwarding wallets, 69 minutes and 24 seconds before the buyers paid.

Recorded featureWhat it shows
Sender0x9f8258…75ac97
TransactionAdvance fee funding
RecipientsAll 26 forwarding addresses; no additional native-payment recipients
ETH delivered0.0380143 ETH across those 26 addresses
Later useEvery funded address forwarded the corresponding buyer’s exact 20% share
The decoded recipient list and successful executed transfers match all 26 forwarding routes.
7

Funding, sales and destinations

Before launch, the 26 buyers sent 232,978 USDC to other wallets. Each returned the same amount on launch day. Fifteen later received the buyers’ remaining VULT.

In March 2024, af084 sent ETH to a wallet that later funded two of the 26 buyers. All three used the same Binance deposit address for AEVO. The intermediary also held other funds.

af084’s later routeAmount in USDC
Previously sent to the wallet receiving its remaining VULT9,100.019827
Further balance sent there195.000000
Proceeds from selling the remaining VULT5,924.731854
Combined transfer to the same AEVO-era deposit15,219.751681
The sale proceeds were part of a larger transfer, not a separate 5,924.73-USDC deposit. View that transfer.

Tokens bought, sold and held

Scope: test wallet and 26 buyers. Snapshot: block 26,299,841, 29 October 2026, 17:17:35 UTC. Supply: 100 million VULT.

Token dispositionVULT, roundedShare of total supplyShare of this group’s purchases
Originally bought1,570,931.10241.570931%100%
Verified sales1,377,408.64531.377409%87.6810%
Still in the traced wallets37,522.45710.037522%2.3885%
Transferred onward; later disposition unresolved156,000.00000.156000%9.9304%

Nearly all held VULT was at 0x5b4baf…aeb110.

The 156,000 VULT went through 501704 to 0x1bff6b…e7e3, where it mixed with other deposits. Its later disposition is unresolved.

Sale proceeds

Sale routeGross stablecoin received
Remaining-token recipients and their traced child wallet259,155.693150 USDC
Common 20% receiving wallet’s two direct sales53,558.814277 USDT
Total, treating each stablecoin as $1Approximately $312,714.51

Gross receipts exceeded the 261,000 USDC purchase cost by about $51,715 before fees. This measures the group’s on-chain cash flow. Individual profits remain unknown.

The test wallet bought 32,438.07 VULT for 1,000 USDC. It sent 6,487.61 VULT to the shared address. The remaining 25,950.45 VULT sold for 5,924.73 USDC.

Where the $312,714.51 went

Onward routeSale receipts associated with that route, at $1 per stablecoinWhat was traced
Bybit-boundApproximately $290,238.78242,720.950667 USDC generated by 24 buyers’ remaining-token recipients, routed through 1d6ec2 and e8f0bf; plus 47,517.831618 USDT from the common 20% receiving wallet, through c467f0.
Binance-boundApproximately $11,964.735,924.731854 USDC generated by JP’s test-wallet remaining-token route, through 7d5996; plus 6,040 USDT paid by the common 20% receiving wallet through 1f0891.
Other or incompletely traced routesApproximately $10,510.998,802.923973 USDC from the 9d813 route into a mixed onward payment; 1,707.086656 USDC from the 5b4baf child wallet’s sales; and a net 0.982659 USDT remainder in the common receiving-wallet reconciliation.
Total$312,714.51Gross sale receipts. Exchange customer accounts and any later fiat withdrawals remain unidentified.

The exchange deposits also carried other funds. The table attributes only VULT sale proceeds.

How the small and mixed routes reconcile

The common 20% receiving wallet’s 53,558.814277 USDT of sale receipts plus 0.006584 USDT of small additional receipts equals 47,517.831618 toward Bybit, 6,040 toward Binance and 0.989243 to another address. The net sale-only remainder is therefore 0.982659 USDT. Fungible balances are commingled; this is an accounting reconciliation, not identification of particular units.

The 9d813 route’s 8,802.923973 USDC of sale receipts joined other money before a mixed 18,226.741040 USDC onward transfer. The 5b4baf wallet later sent 125 USDC onward and 1,500 USDC to a router; its checked balance was 137.148896 USDC, including other receipts. These routes are not established as bank or exchange withdrawals. The source amounts and their proof grades are retained in the sale-destination reconciliation and underlying route records.

Exact onward transfers and later activity

Exact onward transfers and addresses

Observed amountRouteLast established classification
146,200.195798 USDC1d6ec2…dad3 → 260b36…4ceaBybit deposit / reserve address
98,080.341232 USDCe8f0bf…eb0e → 260b36…4ceaSeparate Bybit deposit / same reserve address
15,219.751681 USDCTest-wallet route → 7d5996…4084 → ee7ae8…4055Binance-labelled infrastructure; includes 9,295.019827 USDC beyond the VULT sale receipt
47,517.831618 USDTc467f0…217d → 18e296…82f6Bybit reserve address
6,040 USDT across two payments1f0891…f358 → 28c6c0…1d60Binance-labelled hot wallet; forwards also include other funds
18,226.741040 USDC, mixed sourcesa06fe1…072d → bb8054…fdb7Unclassified recipient

Exchange destinations are traceable on-chain. The credited customers and any cash withdrawals remain unknown. Full route records.

Activity continued after the launch

  • 3 April 2026: the 1f089 route forwarded 54 USDT from the earlier payment together with 2,259.21 USDT of new funds to Binance-labelled 28c6.
  • 3 October 2026: 9f825 sent 3.060450 USDT onward. The ledger traces that amount to later receipts, not to another VULT sale.
  • 10 October 2026: 1f089 forwarded another 6,401.825 USDT to Binance-labelled 28c6. This is not an additional traced VULT sale receipt.
  • 13 October 2026: 1d6ec sent 0.031355234449432796 ETH to an unclassified recipient. Transaction.
  • 23 October 2026: the mixed 1bff address sent 14.478 VULT onward. This is activity of the pooled address, not proof that this group’s deposited tokens were the tokens moved. Transaction.
Verify the quantities and snapshot balances

Exact arithmetic · Canonical transfer ledger and transaction links · All 27 purchase routes · Pinned balance results · Raw state request/response locators · Mixed-address transfer history and duplicate resolution · File hashes.

Use the canonical VULT contract 0xb788144df611029c60b859df47e79b7726c4deba, USDC 0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 and USDT 0xdac17f958d2ee523a2206206994597c13d831ec7. Purchase and sale quantities are derived from exact token receipts; the independent accounting pass checked 217 outer transaction signatures and 305 transfer logs. The 71 new state reads are pinned to block 26,299,841. Provider state and receipt data are not independent consensus or trie proofs.

8

Paaao later said no team member had been sniping

Paaao, @TheDivingPaaao · 28 October 2025, 16:07:31 UTC
But I can assure you, non in the team got rich or was sniping.

The post also defended JP. Original source · Archived source · Preserved original post

Wayback rendering captured 28 October 2026. Original post: 28 October 2025, 16:07:31 UTC.
Wayback rendering captured 28 October 2026. Original post: 28 October 2025, 16:07:31 UTC. Original source · Archived viewer · Capture provenance
Continuation of the same capture. The displayed time, 17:07:31 GMT+0100, is 16:07:31 UTC.
Continuation of the same capture. The displayed time, 17:07:31 GMT+0100, is 16:07:31 UTC. Original source · Archived viewer · Capture provenance

The test wallet had already made its 20% payment when Paaao posted this.

9

What the records establish

Project administrators enabled the early test buy. JP’s post ties that buy to the project. Its 20% payment followed the same arrangement as the 26 opening buyers.

The evidence establishes coordinated payments. Who controlled the 26 wallets, who benefited, and whether any one person exceeded the buying cap remain open.