On January 5th, GoPlus posted on social media stating that recently an account named “ShittymikeSol,” claiming to be the $PNUT project developer, has been publicly promoting a get-rich-quick story of “earning $1,000 to $18 million within a month” and claiming to lead users to “copy success” through live streaming. However, investigations revealed that the price movement of this token exhibits typical “Rug Pull” characteristics, and further uncovered a systematic address network involved in harvesting retail investors. On December 29, 2025, ShittymikeSol posted that it was “the first genuine Alpha trade after a year of rest,” claiming that an investment of $500 in $HNUT appreciated to $200,000 within a day, and that it closed at a high point to profit $700,000 the next day. The tweet also directed users to follow the trades and join its Telegram community. But the community quickly reported that the price of $HNUT plummeted by 99.99%, suspected to be a project team withdrawal and exit scam.
Through on-chain analysis of the $HNUT project team address by GoPlus, although no obvious profits were found, tracking early large transactions and suspected “front-running” addresses ultimately pointed to a wallet publicly associated with ShittymikeSol in August (9B1fR…WZb4). Further tracking revealed that the funds from this network had been consolidated into a single address (2hnAT…GUjf) over the past eight days, with a total amount reaching $3.7 million. Notably, even the remaining funds of the $HNUT project team address flowed into this consolidation address.
Deeper investigation showed that the related addresses used the same methods to create and manipulate dozens of MEME tokens such as $SHEKER, $Gonk, $MADURO, $FAFO, $Trump, $DIM, $TRUMP2, $BANGER, $Lily, $ROY, $horge, $WhiteShark, $TRUMP, $bork, $bonkdog, and $BITPEPE . All these tokens experienced “sharp declines” or “Super Mario-style plunges” (dropping 99% in a short period), and all remaining project funds and suspected front-running profits ultimately flowed into the same consolidation address (2hnAT…GUjf).
GoPlus reminds investors to remain cautious about high-yield promises and to carefully discern the true motives behind so-called “KOL pump-and-dump” schemes.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
HUNT "Wealth Creation Myth" Exposed: RUG Group Manipulates Dozens of MEME Coins to Harvest Followers
On January 5th, GoPlus posted on social media stating that recently an account named “ShittymikeSol,” claiming to be the $PNUT project developer, has been publicly promoting a get-rich-quick story of “earning $1,000 to $18 million within a month” and claiming to lead users to “copy success” through live streaming. However, investigations revealed that the price movement of this token exhibits typical “Rug Pull” characteristics, and further uncovered a systematic address network involved in harvesting retail investors. On December 29, 2025, ShittymikeSol posted that it was “the first genuine Alpha trade after a year of rest,” claiming that an investment of $500 in $HNUT appreciated to $200,000 within a day, and that it closed at a high point to profit $700,000 the next day. The tweet also directed users to follow the trades and join its Telegram community. But the community quickly reported that the price of $HNUT plummeted by 99.99%, suspected to be a project team withdrawal and exit scam.
Through on-chain analysis of the $HNUT project team address by GoPlus, although no obvious profits were found, tracking early large transactions and suspected “front-running” addresses ultimately pointed to a wallet publicly associated with ShittymikeSol in August (9B1fR…WZb4). Further tracking revealed that the funds from this network had been consolidated into a single address (2hnAT…GUjf) over the past eight days, with a total amount reaching $3.7 million. Notably, even the remaining funds of the $HNUT project team address flowed into this consolidation address.
Deeper investigation showed that the related addresses used the same methods to create and manipulate dozens of MEME tokens such as $SHEKER, $Gonk, $MADURO, $FAFO, $Trump, $DIM, $TRUMP2, $BANGER, $Lily, $ROY, $horge, $WhiteShark, $TRUMP, $bork, $bonkdog, and $BITPEPE . All these tokens experienced “sharp declines” or “Super Mario-style plunges” (dropping 99% in a short period), and all remaining project funds and suspected front-running profits ultimately flowed into the same consolidation address (2hnAT…GUjf).
GoPlus reminds investors to remain cautious about high-yield promises and to carefully discern the true motives behind so-called “KOL pump-and-dump” schemes.