All posts
xAxios AIRug Check

Bundled Supply: How to Tell a Rigged Solana Launch From a Protected One

Bundling puts a token's supply across dozens of wallets in the launch block. The same mechanic protects honest launches and hides insider control.

xAxios AI
Rug Check

Bundled Supply: How to Tell a Rigged Solana Launch From a Protected One

A Solana token's holder list can show forty wallets and belong to one person. Bundling is how that happens, and it takes about four tenths of a second.

Most traders now know to check the bundled percentage before buying. Fewer know that the number sitting at the top of most scanners is the wrong one to read, or that a high bundle percentage is sometimes the sign of a launch being defended rather than rigged. Both of those cost money.

Bundled supply is the share of a token bought across multiple wallets inside the launch block, executed as one atomic transaction. It can be a creator protecting a launch from snipers or an insider hiding concentrated ownership, and the percentage alone does not tell you which.

What bundling actually does

Solana produces a block roughly every 400 milliseconds. A Jito bundle lets someone lock several instructions into one of those blocks, executed together or not at all. On a launch that means the token creation and a batch of buys land in the same slot.

Two things follow from that. The mempool gap that sniper bots depend on disappears, because there is no moment between the token existing and the first buys landing. And the supply is spread across every wallet in the bundle from block zero, so the token opens with a holder list and a price move already in place, visible on DexScreener the second it goes live.

Nothing in that mechanic is hidden or exotic. Bundler tools are sold openly, with pricing pages and feature comparisons, and the open-source versions sit on GitHub. The technique is neutral. The intent behind any given bundle is not, and the chain does not label it for you.

A Jito bundle groups a token's creation and its first buys into a single Solana block, roughly 400 milliseconds wide. This removes the window sniper bots need and distributes supply across the bundled wallets before the public can trade.

Bundling is not automatically a scam

This is where the common heuristic breaks. Plenty of creators bundle their own launch precisely because they do not want sniper bots taking the opening supply. If a launch is going to be front-run either way, the creator taking their allocation in block zero is a defensive move, not a trap.

Treating any bundle as proof of a scam means throwing out legitimate launches, and worse, it trains you to look at a single number instead of the thing that actually predicts the outcome. Two tokens can show an identical bundled percentage on day one and end up in completely different places.

What separates them is behavior after the launch, not the launch itself.

The number almost everyone reads wrong

Bundle scanners report two percentages, and they answer different questions.

Total Bundled is cumulative history. It counts every bundled buy the token has ever seen, which is why it can read above 100 percent: wallets that buy, sell, and buy again get counted each time. It tells you what happened.

Current Held is what those wallets still have right now. That is the live risk, the supply that can actually be dumped on you this afternoon. A token can show 60 percent total bundled and 4 percent currently held, which means the bundle already exited and the overhang is gone. It can also show 30 percent total and 29 percent held, which means the whole position is still loaded and pointed at the order book.

Read Current Held first, every time. If a scanner only shows you one number, find out which one it is before you trust it.

Total Bundled counts every bundled buy in a token's history and can exceed 100 percent when wallets rebuy. Current Held is what the bundled wallets still hold, which is the only one of the two that represents risk you are still exposed to.

Read the wallet pattern, not just the percentage

A percentage on its own hides the structure underneath it. The shape of the wallet activity is what tells you whether you are looking at coordination or coincidence.

  • Three or more wallets taking meaningful supply in a single slot: not chance, someone arranged it
  • Two dozen or more wallets coordinating at once with most of the supply between them: intentional, no ambiguity left
  • Two-wallet patterns scattered across unrelated slots: usually a false positive, not a bundle
  • Wallets in the bundle all funded from one source shortly before launch: the holder count is decoration
  • Bundled wallets still holding after days or weeks: much weaker signal than ones that sold in the first hour

False positives are real and worth knowing, because a tool that flags everything is as useless as one that flags nothing. Copytrading bots fire together by design. Traders running multi-wallet setups on a terminal look coordinated because they are, just not against you. Genuine volume spikes put unrelated buyers in the same slot. None of those are a rigged launch.

What the numbers mean when you are about to buy

Under about 5 percent held is background noise. Something snipes every launch worth sniping, and a few percent in coordinated wallets is what a live market looks like.

Once currently held bundled supply is in the 20 to 30 percent range and above, a small group of connected wallets has enough to break the price whenever they choose. That does not mean they will. It means your position depends on their patience, and you should know that before you size it.

The behavioral read beats the threshold, though. One month of pump.fun data on deployer-funded wallets showed more than half of them fully exiting in under a minute, and over 90 percent selling everything in one or two swaps. That is what an extraction bundle looks like in motion: it does not wait around to see how the project does. A bundle that has held through a week of volatility is telling you something different, and the percentage is identical in both cases.

Where to check it

Trench Radar's bundle scanner is the tool most Solana traders reach for here, and deservedly so. Paste a mint, get the slot-level breakdown, wallet counts, SOL spent and both supply percentages, plus a bubble map you can click into per bundle. It is focused and it is honest about its own false positives.

Bubblemaps solves an adjacent problem worth understanding: a bundle is wallets buying in the same slot, a cluster is wallets connected by funding regardless of timing. A token can be clean on bundles and still have one entity behind a third of the supply through wallets funded weeks apart.

xAxios AI's Rug Check reads bundle and sniper holdings as two signals inside a single score rather than a standalone number, alongside dev holdings, funding clusters, fresh-wallet concentration and the contract flags. It also carries the creator's launch history, which is the context a bundle percentage is missing: the same 25 percent means something very different from a first-time deployer than from a wallet that has done this thirty times. The browser extension runs the check on DexScreener, DexTools, GeckoTerminal and OKX Web3 directly.

See bundled and sniper supply scored against dev history and funding clusters on any Solana token.

Open Rug Check

Bundling is the mechanic underneath most of what gets called farming, and it is worth understanding next to the other two ways a token takes money off buyers.

How rug pulls, honeypots and farming actually work, and what each one leaves on-chain.

Read the breakdown

The short version: check Current Held rather than Total Bundled, look at how many wallets moved in one slot instead of the headline percentage, and ask whether the bundle has ever sold. Three questions, well under a minute, and they separate a defended launch from a loaded gun.

Frequently asked questions

The technique is not. A Jito bundle is a transaction-ordering feature of Solana, used by market makers, arbitrage bots and honest launches alike. What can be illegal is what someone does with it: hiding concentrated ownership to create a false impression of distribution, then selling into buyers who were misled by it. The bundle is the tool, not the offense.

A bundle is wallets that bought in the same block, so it is defined by timing. A cluster is wallets linked by funding or transfer history, whatever the timing. One entity can avoid bundling entirely and still control a large share of supply through wallets funded weeks before launch, which is why checking only bundles leaves a gap.

Easily. Bundling is one way to accumulate supply cheaply, not a requirement for pulling liquidity, keeping mint authority live, or dumping a treasury. A zero-bundle token with withdrawable liquidity is more dangerous than a bundled one with liquidity burned.

Yes, as long as the wallets still hold. Graduation moves the trading venue, it does not redistribute supply. Bundled wallets that carried their position through the migration are exactly the overhang that turns an early DEX rally into a wall, which is why Current Held is the number to keep watching rather than a launch-day snapshot.

Premium gratis durante 2 semanas

Por tiempo limitado, para todos: usa todas las funciones premium, incluida Rug Check, gratis.