AYZO Hub is live• 22 networks • 3 free analyses every 24 hours
AYZO›Learn›How to Detect Bundled Wallets
WALLET COORDINATION • GUIDE

How to Detect Bundled Wallets

An evidence-first workflow for investigating groups of wallets that may be related around a token launch or distribution.

Updated 2026-09-06AYZO Product TeamEvidence-first
Quick answer

Combine holder concentration, direct interactions, funding origin and timing. Do not treat a cluster as proof of common ownership.

What “bundled wallets” means

Researchers often use the phrase for a group of wallets whose activity may be related around a token launch or distribution. The phrase itself is not proof of common ownership. A useful investigation has to explain which observable signals connect the wallets.

FundingShared funding origin

Common initial funding can justify deeper review, but exchange infrastructure can also create false positives.

TimingClosely timed activity

Similar timing can support a coordination hypothesis, but timing alone is not enough.

RelationshipsDirect transfers

Direct transfers establish an observable relationship without proving a shared owner.

DistributionConcentrated supply

Large balances spread across wallets deserve more context when other signals also connect them.

A practical detection workflow

  1. Check token structure and authority state.
  2. Identify major visible holders.
  3. Inspect direct wallet relationships.
  4. Trace initial funding where reliable data exists.
  5. Compare multiple independent signals.
  6. Record what the evidence cannot prove.

Common false positives

Wallets can share a centralized exchange, bridge, launch service or routing counterparty without being controlled by the same person. A single shared source or same-block pattern should not become a definitive ownership verdict.

The strongest analysis explains why wallets are connected, how reliable that evidence is and what remains unknown.

What strengthens a bundled-wallet hypothesis?

A bundled-wallet hypothesis becomes more useful when several independent evidence layers point in the same direction. No single signal should be treated as proof on its own.

Evidence layer What it may indicate What it does not prove
Holder concentration A large share of supply is concentrated among observed addresses. That the addresses have a common owner.
Direct wallet relationships Observed addresses have transferred assets or interacted on-chain. That they are controlled by the same person.
Shared funding Multiple wallets received funds from an overlapping observable source. That shared funding equals shared identity or coordinated intent.
Timing and early activity Several wallets participated during a similar launch or acquisition window. That similar timing alone establishes coordination.
Look for convergence, not one dramatic signal. A stronger investigation combines concentration, wallet relationships, funding context, timing and the coverage available for each evidence layer.

Test the hypothesis with the Solana Bundle Checker, Wallet Connection Checker, Wallet Funding Source Checker and Token Holder Concentration Checker.

Investigate the evidence in AYZO

AYZO Hub supports 22 networks and currently includes 3 free analyses every 24 hours. Evidence layers and coverage can vary by network and provider.