Telegram Ring Ran Pump-and-Dump Network That Netted $800K in a Month: Solidus Labs

• PumpCell orchestrated synchronized token launches, sniper-bot buys and meme-driven hype campaigns to inflate micro-cap tokens to seven-figure valuations within minutes, according to a new forensic investigation by Solidus Labs.
• The group generated an estimated $800,000 in October 2025, moving funds through centralized exchanges and an OTC cash broker to allegedly evade compliance controls.
• Solidus says crypto’s AMM-driven markets, bot execution and cross-chain pseudonymity make such schemes difficult for legacy monitoring tools to detect — and warns PumpCell reflects a broader, evolving pattern of digital-asset abuse.

A shadowy Telegram ring of seasoned “degens” has allegedly been running highly coordinated, multi-chain pump-and-dump schemes capable of pushing micro-cap tokens to seven-figure valuations within minutes, according to a new forensic investigation by Solidus Labs.

The group, dubbed “PumpCell,” has been active since at least late 2024 and specializes in manipulation of new tokens on Solana and BNB Chain.

Solidus’ analysis shows the ring orchestrating synchronized token deployments, bot-driven buying, fabricated hype campaigns and timed exits designed to unload inflated tokens onto unsuspecting retail traders.

"To frame the magnitude of the problem: here you have one random channel with (only) a few dozen users from a small Southern European country... and it raked in $800,000 in total in just one month across just a few dozen pumped tokens that soon after lost all value," Spyridon Antonopoulos, vice president of investigations at Solidus Labs told CoinDesk.

"It paints a staggering picture of victim exploitation, especially when extrapolated across the tens of thousands of tokens launched per day across Solana, BSC, Base, and other networks."

Inside PumpCell’s Playbook

Solidus says PumpCell’s playbook begins with deploying or identifying new tokens, seeding liquidity, then using sniper bots such as Maestro and Banana Gun to enter trades within seconds of launch. These early buys often create massive artificial price spikes that trigger automated alerts and draw in copy traders.

Members then spin meme-driven narratives, often impersonating real projects or leveraging cultural trends, to lure additional buyers before exiting at the peak, according to the investigation.

One token, ZERO, reached a nearly $2 million fully diluted valuation in under an hour on Solana, while others such as “inspiration mushroom” and a parody “shanghai composite index 6900” token saw similar surges before collapsing. Solidus estimates the group generated roughly $800,000 in profits during October 2025 alone.

More than a quarter of the wallets linked to the ring eventually funneled funds into centralized exchanges, including Binance, Solidus found. Some members also allegedly cashed out through an Eastern European OTC broker who delivered physical currency in exchange for on-chain transfers — a method that, Solidus says, allowed the operators to avoid compliance controls entirely.

The investigation highlights how crypto’s permissionless architecture enables manipulation mechanics that diverge from traditional markets. Ultra-fast contract deployment, AMM-driven liquidity, sub-second bot execution and anonymous cross-chain mobility make coordinated schemes difficult to detect with legacy surveillance tools built for centralized order-book markets.

Solidus argues that modern supervision must integrate real-time AMM analytics, behavioral wallet clustering and onchain fund tracing to identify such operations. PumpCell, the firm warns, is not an outlier but a template for contemporary digital-asset abuse operating at speed and scale.

Antonopoulos added that exchanges have an "obligation for consumer protection," given the amount of platforms that are releasing their own layer-2 networks.

"Virtually every major exchange are basically releasing the floodgates by having a layer 2 that they want to keep as permissionless as possible. They don't want to be the gatekeepers, they want to stay with the virtues of crypto. But as the same time, they have an obligation for consumer protection," he said.

"You're actually in a world where they could be listing thousands of tokens per day, maybe not in an order book but those are available for liquidity pools and trading on L2s."

• As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
• GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
• Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

• Surf raised $15 million to develop "Surf 2.0" and launch an enterprise product aimed at institutional users.
• The firm said it has generated more than 1 million research reports since July and is seeing 50% month-over-month growth.

Disclosure & Polices: CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. CoinDesk has adopted a set of principles aimed at ensuring the integrity, editorial independence and freedom from bias of its publications. CoinDesk is part of Bullish (NYSE:BLSH), an institutionally focused global digital asset platform that provides market infrastructure and information services. Bullish owns and invests in digital asset businesses and digital assets and CoinDesk employees, including journalists, may receive Bullish equity-based compensation.