Bubblemaps said on Oct. 15 that crypto KOL Anglio may have used five undisclosed linked wallets to front-run his public token calls on X and later sell at higher prices, generating about $130,000 in profit.
The on-chain analytics and visualization platform said it reviewed two weeks of Anglio’s on-chain activity. Across 534 public token recommendations, 61% of the mentioned tokens showed targeted linked buying within 20 seconds before Anglio’s public post.
Buys came about 20 seconds before the public posts
Bubblemaps said it reconstructed the timestamps of all 534 recommendation events on a second-by-second basis and identified what it described as a repeatable operating pattern.
On average, five undisclosed side wallets submitted buy transactions to decentralized exchanges about 20 seconds before a recommendation was posted publicly, allowing them to enter positions at lower levels first. After that, Anglio’s publicly linked transparent wallet, identified in the report as 2ksQ77, bought a smaller amount of the same token, which Bubblemaps said helped display visible holdings on social media. Once the post was published and retail buying pushed the token price higher, the five side wallets started selling in batches within an average of four minutes. The public wallet then closed out last.
Bubblemaps said this setup kept the main positions hidden in side addresses while using the short burst of liquidity created by the public post to realize gains.
Fund flows were traced back to the same exchange deposit address
The report said that using multiple wallets alone does not prove common control, but fund inflows and outflows can leave clear on-chain links.
According to Bubblemaps, the funds used by the side wallets to pay gas and provide trading capital came directly from a personal wallet that had already been publicly labeled as belonging to Anglio. After repeated token sales, the five side wallets converted profits into major assets and eventually sent the proceeds to the exact same internal deposit address at a centralized exchange used by Anglio’s main wallet.
Bubblemaps said that, because exchange deposit addresses are tied to single accounts under blockchain accounting records, that overlap directly links the five side wallets and Anglio’s main wallet within the same funding network.
534 calls in two weeks, averaging 38.1 a day
Bubblemaps said the data covered 534 token recommendations over two weeks, equal to an average of 38.1 calls per day.
In its report, the firm said that frequency goes beyond ordinary project selection in thinly traded micro-cap token markets and instead forms a minute-based liquidity extraction channel. It tied the roughly $130,000 in cumulative profit to losses borne by buyers who entered after the public posts as prices rose and then fell. Bubblemaps added that concentrated selling four minutes after a post can be enough to drain one-way liquidity and trigger sharp price declines in low-depth token markets.
Tracking map has been added to the public panel
Bubblemaps said it has added the five side wallet addresses involved in the case, along with the main-wallet fund-flow map, to its on-chain graph analysis panel and opened a real-time tracking link to the community.
The report was published by TechFlow and credited to Shenchao TechFlow.
