# exec: 2 wlink rugs 16 Oct 16:30-16:35 BKK (#2677)

Pulled pools (both live wlink, $10 each, bought ~32 s after pool creation, pool WETH 0 after pull, booked 0x):
- 0x4e40ff55 (token 0x435c93): init tx from 0x2cf8e5b1 (high-nonce wallet, 17k txs, 2.66 ETH) via contract 0x05c420bc.
- 0x68d5f034 (token 0xd34e38): init tx from 0xdadbe5da (fresh wallet, 5 txs, 0.00008 ETH left) via contract 0x73991a25.

Pattern:
- Different deployers, same kit: identical liquidity L=63246764568802612649417 (fingerprint, dry gate saw both), fee 100, supply 1e9.
- Same signal wallets led both: 0x01b38e4b and 0xc780e5ab (the third wallet differed). They look like the rugger's own wash/lead wallets.
- No LP-owner or deployer-history gate exists in fm_rug.py (pull-pause only); it cannot see a first-time rug.
- A third live buy followed at 16:45: 0x78040fe9 (deployer 0x88167cf3, fresh, same factory 0x73991a25, same L fingerprint, different signal wallets 0x2cae22/0x9584a4/0x0fcb0e). Open now; if pulled, the 3-pull stop trips (fm_rug 3, WL_PULL_HOLD).

Action taken (no firstmin change): the 4 signal wallets above added to wl/bad_wallets.txt (producer wl_signal.py re-reads it every 15 min rebuild, they never count toward a signal again). Backup bad_wallets.txt.bak_exec_1792144200.

Not done / why: seed-size (L) fingerprint enforcement was refuted by research (#2626, blocks 70% winners). Factory 0x73991a25 deployed 2 of the 3 last live buys, 2 of which are rugs/likely rugs; research should replay "factory 0x73991a25 + deployer txcount<=5" as a gate before I enforce it.

## Update 16:55 BKK (#2682)
- 3rd buy 0x78040fe9 pulled at 16:45 (WETH 0, 0.0041 ETH): 3 rugs in 3 h, same L fingerprint, factory 0x73991a25 on 2 of 3, deployers all different fresh wallets, signal wallets different on the 3rd. No single deployer/LP owner to block: the common thing is the kit, not the wallet.
- rugwatch already paused LIVE_WLINK (paused_by_rugwatch_1792144212); wlink1 paused since 12 Oct; fm_rug 3-pull stop active. Live wlink is not buying; no live change by me.
- Wallet blocklist (4 lead wallets) already in wl/bad_wallets.txt. Kit gate (factory + fresh deployer) waits for research replay #2681; enforce only if it does not block winners, before Ben restarts wlink.