Funding Abuse
The cleanest tell of a manufactured launch: the “organic” early buyers were all freshly funded, farm-seeded wallets coordinated to fake demand. Conyr inspects every wallet that bought a token in its first minutes and surfaces the structural funding patterns behind them — fresh-seeded wallets, farm distributors, CEX-root convergence, and shared trading-terminal signals.
REST
L3 GET /v1/token/{mint}/funding-abuse
| Parameter | Type | Default | Description |
|---|---|---|---|
early_window_minutes | integer | 60 | Early-buyer window after first trade (10–240) |
limit | integer | 50 | Max wallets returned (max 200) |
Returns an aggregate summary plus a per-wallet breakdown.
Summary
| Field | Description |
|---|---|
early_buyer_count | Distinct wallets that bought inside the window |
seeded_wallet_count / seeded_wallet_pct | How many were freshly funded just before buying |
funded_by_farm_count / funded_by_farm_pct | How many trace to farm distributors |
cex_root_count / distinct_cex_root_count / cex_root_pct | CEX-traceable wallets and how many distinct roots they span |
avg_seed_fund_to_buy_seconds / median_seed_fund_to_buy_seconds | How fast seeded wallets bought after funding |
top_seeded_terminal / top_seeded_terminal_share | The trading terminal most concentrated among seeded wallets |
score | Composite suspiciousness, 0–100 |
suspicious | true once the score crosses Conyr’s calibrated cutoff |
reasons | Reason codes behind the score |
The score weights and the suspicious cutoff are calibrated proprietarily and are not part of the public contract. Build product logic on suspicious and reasons — the stable surface — not on the raw score.
Reason codes
| Code | Meaning |
|---|---|
SEED_WAVE_HEAVY / _MODERATE / _LIGHT | Share of the cohort that’s freshly funded (heavy → light) |
FARM_FUNDED_FRESH_WALLETS | A material slice was funded by known farm distributors |
CEX_DISPERSED_ROOTS | Many seeded wallets trace to several distinct CEX hot wallets (coordinated dispersal) |
CEX_ROOT_CONVERGENCE | Seeded wallets trace to a few CEX hot wallets (coordinated convergence) |
FAST_FUND_TO_BUY | The cohort’s median funding-to-buy gap is short |
SAME_DAY_FUND_TO_BUY | The cohort’s average funding-to-buy gap is within a day |
SHARED_TERMINAL_<terminal> | A dominant share of seeded wallets used the same terminal |
Per-wallet
Each wallet reports is_seeded_wallet, fresh_fund_to_buy_seconds, funded_by_farm, root_label / root_source / is_root_cex, direct_funder, primary_terminal, and first_buy_* details — the receipts behind the summary.
curl -H "Authorization: Bearer $API_KEY" \
"https://api.conyr.ai/v1/token/EPjFWd.../funding-abuse?early_window_minutes=60&limit=50"{
"token_mint": "EPjFWd...",
"summary": {
"early_buyer_count": 42,
"seeded_wallet_count": 24, "seeded_wallet_pct": 0.5714,
"funded_by_farm_count": 12, "funded_by_farm_pct": 0.5,
"cex_root_count": 15, "distinct_cex_root_count": 4,
"top_seeded_terminal": "PHOTON", "top_seeded_terminal_share": 0.4167,
"suspicious": true,
"score": 81.0,
"reasons": ["SEED_WAVE_HEAVY", "FARM_FUNDED_FRESH_WALLETS", "CEX_DISPERSED_ROOTS", "FAST_FUND_TO_BUY"]
},
"wallets": [
{
"wallet_address": "7xKXtg...",
"first_buy_usd": 425.30,
"fresh_fund_to_buy_seconds": 7334,
"funded_by_farm": 1,
"root_label": "Binance",
"is_root_cex": 1,
"primary_terminal": "PHOTON",
"is_seeded_wallet": 1
}
]
}This summary is also embedded in suspicious-activity, and its reasons surface there as live_activity_flags. Cached ~30s.