# On-chain — wallets, holdings, and what's actually proven

---

## The TON wallet — ~55–65% confidence it's his

```
UQBOHdqPdMVPhx4Lm21Fjn0XTva10qYpNo-GYa-TKdVVfa4K
raw: 0:4e1dda8f74c54f871e0b9b6d458e7d174ef6b5d2a629368f8661af9329d5557d
```

Attributed by @MrLalfy (579 followers) and @cryptosecc00 (513 followers). Neither has
published the address; it was recovered by matching CHERRY transfer amounts to full precision.

**Holdings, ~$612,000 total:**

| Position | Amount | USD |
|---|---|---|
| UTYA spot | 7,773,447 | ~$308K |
| CHERRY | 5,176,457,914 | ~$112K |
| TON native (cash) | 70,856 | ~$102K |
| UTYA-GRAM LP | 56.92 = **11.76% of the pool** | ~$86K |
| CHERRY-UTYA LP | 2,050,635 | ~$4K |
| 39 dust tokens | — | <$140 |

Effective UTYA exposure ≈ $351K = **57% of the book** (spot + 1,083,899 inside the LP).

### For it being his
- **$612K vs his stated "600k ish in ton memes"** — the single strongest datapoint
- Composition matches his stated basket exactly: UTYA-dominant, heavy GRAM, LP'd in UTYA-GRAM
- Created 24 Dec 2024, funded **once** with 1,962 GRAM from Binance, then **never topped up** — the whole $612K is appreciation on one ~$11K entry. Matches his bio precisely.

### Against
- **Zero identity evidence.** No Telegram username NFT, no .ton domain, no assigned name. On TON these markers are cheap and common.
- The wallet he *did* publicly claim — **1999.ton**, Dec 2024, twice — has never touched this address and has been listed for sale on Getgems since Dec 2025.
- @cryptosecc00 is the **#3 CHERRY holder (~$61K)** promoting CHERRY. That post is talking his own book.
- No independent corroboration; no third account attributes this address to him.

### Connected wallets — none

98 events traced, 24 counterparties, all but three are contracts. The three user wallets hold
$1, $38, and one is a highload_v3 aggregator ($9M across 174 jettons — infrastructure, not a
person). The Aug 2025 CHERRY recipient holds 0.01 TON and is uninitialized.

**This wallet has no network.** One deposit in, DEX trades only, two outbound transfers to
wallets now empty. If it is his, it's a standalone holding wallet with no siblings.

### The 21 Aug 2026 trade — worth understanding as a template

| UTC | Action |
|---|---|
| 23:04:03 | Unstakes UTYA-GRAM Farm NFT — collects 1,186,552 UTYA + 3,225 GRAM rewards |
| 23:04:26 | **Burns 227.69 LP** → 4,494,996 UTYA + **114,599.44 GRAM** out |
| 23:05–23:07 | Spends ~35,160 GRAM buying back **~1.57M UTYA** |
| 23:15:54 | Buys 145.9M CHERRY |

Removed ~80% of an LP position yielding ~59% APY and rotated into spot + cash. Kept ~$102K
TON unspent. That's a directional bet: no more fee income, no more forced selling into a
rally, maximum upside if UTYA runs — with a sixth of the book held as dry powder.

---

## The Solana wallet

```
4NgEJMGCvP5fJWAH4CPPsBXMW4yCK6dtCBNjkLJ4s5EL
```

His pump.fun account. 348 transactions parsed:

| | |
|---|---|
| Buys | **1** |
| Tokens received | 70 |
| Tokens sold | 45 |
| SOL out | 15.02 |
| **SOL in** | **1,964.14** |

**He barely buys on this wallet.** Things get sent to him — tribute coins, dev allocations —
and he sells them. 1,964 SOL in against 15 out. This is not the wallet holding the
concentrated positions, but it is the only Solana window anyone has, and it does not look
like accumulation.

Note the live dispute this feeds: he has been publicly accused of dumping tribute coins on
followers, and his defence has been that his posts telegraphed it.

**No link found** between the TON and Solana wallets — no bridge, no shared CEX deposit,
no memo.

---

## Method notes for future sessions

TON APIs that work without a key:
- `https://tonapi.io/v2/accounts/{addr}` — status, balance, interfaces
- `https://tonapi.io/v2/accounts/{addr}/jettons?currencies=usd` — holdings with USD
- `https://tonapi.io/v2/accounts/{addr}/events?limit=100` — transactions
- `https://tonapi.io/v2/accounts/{addr}/nfts` — **identity check: Telegram usernames and .ton domains live here**
- `https://api.ston.fi/v1/pools/{pool}` — LP decomposition

Solana:
- `https://advanced-api-v2.pump.fun/coins/top-holders/{mint}` — top 50 with `enteredAt`, `isDev`/`isSniper`/`isBundler`, `fundingSource`
- `https://frontend-api-v3.pump.fun/coins/{mint}` — `ath_market_cap` + timestamp, creator, socials
- `getTokenLargestAccounts` rate-limits to 429 immediately — use the pump.fun endpoint instead

**Watch out for DEX plumbing masquerading as counterparties.** On TON, `mergesort.t.me` is the
DeDust vault and `join-hashtag-on-tele-gram.ton` is a pTON jetton wallet. Both hold TON DNS
names and both look like people in an explorer. They aren't.

**A co-buyer clustering approach was tried and failed.** Intersecting top-50 holders across
Cupsey/Chonketha/LAYOOO/Jotchua found zero wallets in 3+ and only exchange hot wallets as
shared funders. Reasons: top-50 *current* holders misses anyone who sold; funder data only
reaches back weeks; and sophisticated traders use a fresh wallet per position. A proper
version needs the first ~200 buy transactions per coin from a paid indexer (Helius, Birdeye,
Dune) — public RPC rate-limits too hard.