GOTM Labz / Rico (@moon_blaze_) — Full Investigation

Visual Evidence — Screenshots of Live Infrastructure

CAPTURED EVIDENCE (Click to Expand)

SMOKING GUN — GAINZ Staking Pays Puffsterz Tokens

GAINZ staking page showing Puffsterz Jacket trait paying $P4L tokens — proves network connection

nftstake.app/gainz — "Puffsterz Jacket" trait pays 5 $P4L. Network connected through one staking platform.

GAINZ on GOTM — 3,185 NFTs Staked

GAINZ staking migrated to GOTM Labz showing 3185/3324 staked

gotmlabz.io/nftstake/gainz — "GOTM LABZ" tab visible. Migrated to centralized platform.

THC Labz Store — Cannabis Shipped Via USPS

THC Labz Shopify store selling cannabis flower for shipping via USPS

store.thc-labz.xyz — Sells flower to all 50 states. Federal felony (21 USC § 841).

GOTM DAO Whitepaper — All Member Projects

GOTM DAO whitepaper listing Puffsterz, VibeTribe, THC Labz, MOSC, MOB, SoDead, DKV as members

wp.gotmlabz.io/gotm-dao — Lists all 7 DAO members including SoDead (double-rugged) and THC Labz (federal crime).

Haizeel Hashnan — SoDead Team Page

Haizeel Hashnan listed as artist on SoDead team page — same artist as THC Labz

sodead.xyz/team/haizeel — Same artist for THC Labz (cannabis) AND SoDead ($350K double-rug). One person links a federal crime to a double-rug.

BASC + Puffsterz — Both On GOTM Staking

BASC staking page powered by GOTM Labz infrastructure

staking.bascdao.net — DakDaze's project. Same infrastructure as Puffsterz (screenshot).

All screenshots captured April 13, 2026. Click any image to view full size. These are live public websites — verify for yourself.

Person of Interest — "Rico"

RICO (@moon_blaze_) — GOTM Labz Founder

Twitter: @moon_blaze_ (Twitter ID: 769678490, account created August 20, 2012 — 13+ year old personal account, predates crypto) | Bio: "Founder @GotmLabz web3 solutions & @GAINZNFTs" | 2,753 followers | Blue verified

Discord: rico4208 | Real name: UNKNOWN — operates pseudonymously

Wallets: moonblaze.sol (1,740 assets — 219 GAINZ, 90 Great Goats, 85 Candies, 52 XElementia, 48 Undead Genesis, 47 Puffsterz, 45 MNK3YS, 39 OG DAO, 33 MOB, 20 GOTM DAO, 13 SoDead, 9 MOSC, 6 BASC) | rico.sol (empty — only 12 SNS domains: rico, deadpool, rosalia, evan, bini, jeffrey, cert, impact, numb, erie, tutorials, teaching)

GEOGRAPHIC INDICATOR — LIKELY UK-BASED: Frequently uses "mate" in conversation. Entity styled as "Ltd" (British incorporation). References "the wifey" (married). Has family ("Touching grass (sand) with the fam" — beach trip). Has a dog named Roxie ("This is our dog Roxie, she's a little escape artist"). The .sol domain names evan, rosalia, bini may be family member names (children or relatives).

Company: "GOTM Labz Ltd" — NOT REGISTERED at UK Companies House despite using "Ltd" on all platforms (gotmlabz.io, nftstake.app, nftlaunch.app, shift3.app, traitstore.app). Using "Ltd" without registration is illegal under UK Companies Act 2006 s.33.

Named as XElementia team member by @AGNI_X_TRIBE (DakDaze-controlled account). Built infrastructure for BASC, Puffsterz, VibeTribe, Orbis, GAINZ, and 20+ more.

Confirmed accounts: Twitter @moon_blaze_ (verified — bio says "Founder @GotmLabz") | Discord: rico4208 (in GOTM whitepaper) | YouTube | GOTM Linktree | Telegram

Note: Username "moonblaze" exists on 59+ platforms (GitLab, GitHub, Steam, Docker Hub, etc.) but these are DIFFERENT PEOPLE — verified and excluded. Only accounts confirmed as the same person are listed above.

Key associates (from tweets): @Prim_1988 (team), @SiNftGod (sends Rico bi-weekly USDC payments), @SWISS_SOL, @benksy + @XGinsu (Frens Factory — gifted items), "Deano" from @mnk3ylabs (MNK3YS), @dak_daze, @HaizeelH (artist), @The_Kronic_King (THC Labz — sent gifts)

ON-CHAIN PROOF — moonblaze.sol Connects GOTM to Puffsterz and MOSC

CRITICAL: vibetribe.sol (Puffsterz wash wallet) transferred 25,380 P4L (PUFFSTERZ) tokens to moonblaze.sol on April 5, 2026. moonblaze.sol sent SOL back. This directly connects the GOTM Labz founder to the Puffsterz fraud network on-chain.

CRITICAL: moonblaze.sol actively transfers MOSC NFTs — MOSC #2740 and #1202 sent to 81Y8o331... as recently as April 12, 2026. This proves moonblaze.sol has direct involvement in the MOSC project.

GOTM/PUFFSTERZ Orca trading pair exists (7wyiAeF...rdG) — someone deliberately created a liquidity pair between these two project tokens, proving organizational connection.

@Prim_1988 — GOTM Labz Team Member

Wallet: prim.sol — SNS domains: prim, rightclickjpeg, rightclicknft

Medium: @prim1988 — published "Introducing $PRINT: A Revolutionary Solana Reflection Token" (Feb 2024)

Netherlands geographic indicator: Prim's Medium bio links to maskedbutaware.nl — a Dutch-language autism resource. Same person who wrote about the $PRINT Solana token. Contact: maskedbutaware@gmail.com. DEV.to profile shows same tech stack (Next.js + Firebase + Vercel) as GOTM Labz.

Accounts found: TikTok | Scratch

Infrastructure — The Machine Behind The Network

"GOTM LABZ LTD" — UNREGISTERED ENTITY RUNNING FINANCIAL INFRASTRUCTURE

"GOTM Labz Ltd" does NOT exist at UK Companies House — verified via Companies House search. Using "Ltd" without registration is an offence under UK Companies Act 2006 s.33. A different entity "GOTM LIMITED" (company 07008124, director Oleg Tarnavchik) exists but is completely unrelated.

Domain (gotmlabz.io): Registered August 14, 2024 via GoDaddy. Privacy: Domains By Proxy, LLC (Arizona). Cloudflare DNS. Expires Aug 2027.

Domain (nftstake.app): Registered June 21, 2024 via GoDaddy. Vercel DNS hosting. Same registrar as gotmlabz.io.

Domain (nftlaunch.app): Registered December 18, 2024 via GoDaddy. Vercel DNS hosting. Same registrar.

All three domains through GoDaddy with identical privacy/hosting patterns — confirming single operator.

Same GitBook org (1Acp9mnfe1LfvEwFrii5) manages documentation for gotmlabz, nftstake.app, AND gangsofthemeta — proving single-operator control across all platforms.

GitHub org: github.com/GOTMLabz — private, zero public repos, zero public members.

Linktree: linktr.ee/GotmLabz | Telegram: t.me/GotmLabz

27+

Connected Projects

97.12%

$GOTM Top-Holder Concentration

Registered Business Entity

THE SMOKING GUN — GAINZ Staking Distributes Tokens From The Entire Network

The GAINZ staking page (3,088 NFTs staked) pays $GOTM as primary reward AND distributes 48 active airdrops including:

This proves the entire token ecosystem is interconnected through one platform. Staking one project's NFTs distributes rewards from 6+ other projects. All controlled by GOTM Labz. All connected to the same fraud network.

PLATFORMS OPERATED (All Verified Live)

THEIR OWN WEBSITE CONFIRMS THE NETWORK — Testimonials Page

The gotmlabz.io homepage features testimonials from the exact people we've been investigating — confirming every connection on their own platform:

DakDaze (BASC CEO, 33+ fake giveaways, 16,353 hoarded NFTs):
"Moving the BASC ecosystem over to GOTM Labz was effortless... Becoming an ambassador for GAINZ/GOTM Labz was an easy decision."

SIN (@SiNftGod) (Puffsterz LLC President, 92% fake volume):
"GOTM Labz has been a total game-changer for us — their Web3 infrastructure on Solana gave our project the scalability, reliability, and flexibility we needed."

Swiss SOL (Puffsterz CTO, VibeTribe founder, completely anonymous):
"Full respect to the team for setting a new standard guided by ethics and morality."

They also direct users to "Buy on Orbis" — the marketplace with 0.08 SOL total volume, 2 wash trades, and 17 red flags. Orbis is listed as an official "Partner" in their partner logo bar alongside Jupiter, Metaplex, Phantom, and Solana — legitimate platforms that almost certainly did not consent to being listed alongside an abandoned NFT marketplace.

Wallet Forensics — On-Chain Evidence

COMPLETE WALLET MAP — All SNS Domains Resolved

SNS Domain	Wallet	Owner	Connection
moonblaze.sol	w2ekw7X...1jpi	Rico (@moon_blaze_)	Sends MOSC NFTs, receives P4L tokens from vibetribe.sol
rico.sol	6KBkFss...GWxt	Rico	SNS domains: rico, deadpool, rosalia, evan, bini
gainz.sol	9sFfihS...rLAf	GOTM ecosystem	100+ SNS domains including thclabz, gainz, weedfarm, ganjapedia, stonedlife
gangsofthemeta.sol	3RU8XgE...aPS	$GOTM token deployer	Created $GOTM token — links token to brand
unisin.sol	DuKvUgC...aRqT	GOTM ecosystem	$UNISIN "cross-community token"
prim.sol	BjSaYdg...dNm	@Prim_1988	Netherlands-based developer
thclabz.sol	H6n2bv6...6DUg	THC Labz	Cannabis shipping operation
mutantsonsol.sol	9y4rZAb...wdL	MOSC creator	moonblaze.sol transfers MOSC NFTs

gainz.sol wallet holds 100+ SNS domains including cannabis-themed (weedfarm, weedmemecoin, ganjapedia, stonedlife, jointroller, hemptherapy, ganjagoddess), gambling-related, and notably: thclabz, gainz, puffvalleystx. Domain speculation + infrastructure control = financial extraction at every layer.

GAINZ / MOSC / $GOTM — Creator Wallets Traced

GAINZ (HoodiGainz) creator: E1oVvqE...ZPh — update authority AND 100% royalty recipient. Candy machine: DshVueX...BbC. Collection: 3,333 NFTs, symbol HOOD, 6.9% seller fee. Art by "Sobana."

MOSC creator/authority: Update auth: HPaNS3L...bf6 | Royalties (100%): DB5CkRt...2Sg | Collection NFT creator: mutantsonsol.sol

$GOTM token deployer: 3RU8XgE...aPS — owns gangsofthemeta.sol SNS domain. Token: AAqZ6CE...U5. 897M total supply. 3,035 holders. 97.12% top-holder concentration.

MOSC staking admin fee wallet: DzoaYiU...M8P — likely collects fees across all GOTM staking deployments.

GOTM DAO — The Connected Projects

GOTM DAO MEMBER PROJECTS — Royalties Flow To DAO Treasury

1. BASC (@BoredApeSolClub) — Full investigation. DakDaze CEO. 1,922 SOL traced. 33+ fake giveaways. 12,405 NFTs hoarded. Staking live.

2. Puffsterz (@puffsterznfts) — Full investigation. Karim Adhami LLC President. 320 wash wallets. 92% fake volume. Staking live.

3. VibeTribe (@VibeTribe_NFT) — "Extension of Puffsterz Corp." Swiss + Karim co-founders. 1,581 NFTs, 181 holders. Staking token: $VAPE.

4. GAINZ (@GAINZNFTs) — GOTM Labz's own NFT collection. 3,333 NFTs, 3,088 staked. Staking live — distributes tokens from entire network.

5. THC Labz (@THC_Labz / @The_Kronic_King) — Ships cannabis flower via USPS to all 50 states. Federal felony (21 USC § 841). Accepts Solana Pay. Shopify store live. Staking live. 2,420 "Growerz" NFTs. Art by Haizeel Hashnan (@HaizeelH, Malaysian animator — MMU graduate, worked on BoBoiBoy/Mechamato for Netflix/Disney).

6. MOSC (Mutants On Sol) (@MutantsOnSol) — ~3,500 NFTs. Staking SHUT DOWN ("Service Shut Down, NFTs auto unstaking"). Token: $MLabs. DakDaze holds 130 MOSC NFTs (his largest non-BASC holding). moonblaze.sol actively transfers MOSC NFTs.

7. SoDead (@SoDeadNFT, sodead.xyz) — DOUBLE-RUGGED. Original founders stole 600 SOL after Chalice mint. "Derugger" then generated $350K+ in royalties and ALSO rugged. Community took over a third time. Same artist (Haizeel Hashnan) as THC Labz.

8. MOB Collective (@MOBCollective_) — Token: $RISE (distributed via GAINZ staking). 27 NFTs bought by Puffsterz team wallets.

GOTM-SUPPORTED PROJECTS — Confirmed Infrastructure Users

Orbis (Full investigation) — Built on GOTM burn2mint. Website code contains GOTMWallet references. Listed as GOTM partner. 69/777 minted, 2 wash trades, abandoned.

Frens Factory (@Frens_Factory) — $FRENS distributed via GAINZ staking. 29 NFTs held by Puffsterz team wallets.

Enchanted Miners (@enchanted_nfts) — Staking live. $MINE distributed via GAINZ. 23 NFTs held by Puffsterz wallets.

Nuddies (Staking live) — Former CTO exposed by @zachxbt for fabricating hack, stealing 94 SOL.

Laughing Bones — Staking live. 250 exclusive 1/1 artworks.

Northlanders — DakDaze holds 27 NFTs. Uses GOTM staking. 5 NFTs held by vibetribe.sol + puffsterz.sol.

Vtopia (@vtopiaio) — $591 market cap. Dead.

Also listed: Big Cats (staking disabled), Stoned Sloths, Bohemia, MNK3YS, The X Bank

GOTM DAO ACQUIRES DEAD PROJECTS

The GOTM DAO explicitly acquires failed NFT projects for rebranding and extraction: Undead Genesis, Candies NFT, and at least 1 additional unnamed project — acquired for further royalty extraction. The playbook: buy failed projects cheap, rebrand, extract remaining value through royalties and token issuance, abandon.

The DAO is a 300-NFT collection. Floor: 11 SOL. 133 holders. "50% of the profits made are shared with DAO members on a monthly basis." No audited financial reporting.

Key Network Operators

SWISS (@SWISS_SOL) — Puffsterz CTO / VibeTribe Founder

Twitter: @SWISS_SOL (created August 19, 2023 — 1,627 followers, 8,445 tweets, Blue verified) | Bio: "C.T.O. || @VibeTribe_NFT >> @puffsterznfts >> @PuffsterzInk >> @P4L_Puffsterz" | Website: puffsterz.xyz

Wallet: swiss.sol (66LJgC47M5J3ynh2oYLv4TMDHzNNbTGpDbrBGYWQpbWQ) — resolved via Bonfida SNS

Real identity: COMPLETELY UNKNOWN. Despite 8,445 tweets, zero personal information has ever leaked. No face photo. No real name. No location confirmed (DC area previously suspected, unconfirmed). Exceptional operational security.

Promotes Rico's tokens: Directly promotes UNISIN (tweet 1, tweet 2). Promotes Orbis as "ALPHA" (tweet). Cross-promotes @GhostKidDAO, @GAINZNFTs, @BoredApeSolClub.

Sub-brands: S0CIETY3 — "apparel service" that is a free Canva portfolio site with zero clients. @Blunder_Token — zero web presence.

HAIZEEL HASHNAN (@HaizeelH) — Artist Linking THC Labz to SoDead

Real name: Haizeel Hashnan | Nationality: Malaysian (Penang) | @HaizeelH

Background: MMU University Cyberjaya graduate (2013), Film & Animation. Worked as animator on Mechamato and BoBoiBoy (Netflix, Disney, Cartoon Network).

CRITICAL CONNECTION: Haizeel is the artist for BOTH THC Labz / The Growerz (cannabis shipping operation) AND SoDead NFT (double-rugged project). The same artist provides artwork for a federal felony operation and a project that was rugged twice — linking these entities through a shared team member.

Other projects: BroHalla NFT, VendX NFT, Little Guys World, Candies NFT (GOTM-acquired dead project), Gaimin. Portfolio: THC Labz page

Sources: VulcanPost profile | MMU Alumni | SoDead team page

SODEAD — DOUBLE-RUGGED, NOW IN GOTM DAO

First rug (Aug 2022): 3 undoxxed founders minted 4,200 NFTs at 0.069 SOL. Launched "Chalice" mint raising 600 SOL. Immediately rugged and disappeared.

Second rug (~Feb 2023): A "doxxed SoDead NFT holder" took over. Executed the "Purification" art upgrade. Launched SoDead Coffins (3,000 supply). Minted $HEM token via "Immortal Labs" (20M supply). After ~6 months, generated $350,000+ in royalties then rugged the project a second time.

Derugger lead — Arsen Aharonyan: LinkedIn | @arsenaharonyan. Listed as "CEO @ SoDead / Founder @ Immortal Inc" in Medium article (Jan 2023). Based in Yerevan, Armenia. Previously CMO at Spheroid Universe (XR/metaverse). Has since been removed from the SoDead team page — replaced by "Datguy" as Project Manager. Timeline fits the second rug period. Circumstantial but strong lead.

Current state: SoDead is now community-run and integrated into the GOTM DAO. Current team: Datguy (PM), Haizeel (artist — same as THC Labz), A$AP BUNNY (@mrdvweed), Mrlucaz (legal), Colesy (X lead), CRYPTOES (@Cryptoes2447).

Sources: sodead.xyz | Immortal Inc GitBook | $HEM tokenomics | GOTM DAO (confirms membership)

ON-CHAIN CONNECTION MAP — moonblaze.sol Connects Everything

10,000+ transactions analyzed across moonblaze.sol:

vibetribe.sol: 50+ transactions (Oct 2024 – Apr 2026). P4L tokens, GOTM tokens, $VAPE transfers, NFT purchases, USDC transfers. HEAVY connection.

puffsterz.sol: 70+ transactions (Feb 2025 – Mar 2026). Regular USDC/USDT payments ($5-17 each, recurring). P4L/GOTM token transfers. HEAVY connection — looks like recurring payouts.

Universal Node: ~10 transactions (Apr 2025). moonblaze.sol sent 27,000 GOTM tokens to Universal Node.

BASC Treasury: Treasury sent 12 SOL to moonblaze.sol on March 30, 2025. Direct payment from BASC to GOTM founder.

dakdaze.sol: No direct transactions found — but they share the SAME counterparties (vibetribe.sol, puffsterz.sol, Universal Node, BASC Treasury) and receive the same token types (GOTM, P4L, USDC). Consistent with coordinated entities.

Intermediary wallet: 3c6eWvT...mJk appears repeatedly in puffsterz.sol transactions, sending USDC/USDT/GOTM to BOTH moonblaze.sol AND dakdaze.sol — a shared operational wallet connecting both operators.

Additional wallets resolved: swiss.sol | datguy.sol (SoDead PM) | thclabz.sol

SNS DOMAIN SQUATTING — gainz.sol Controls 18+ Brand Names

The gainz.sol wallet holds 18+ SNS domains including major brand squats: coca-cola.sol, capitalone.sol, american-express.sol, exxon.sol, pixar.sol, overstock.sol, gofundme.sol, plus: autistic.sol, pills.sol, oxycodone.sol, unitedkingdom.sol, maxwin.sol, quarterback.sol, legal.sol, debt.sol, capitulation.sol, gains.sol

The wallet also holds 365 NFTs — almost entirely spam/scam airdrops (fake JUP drops, WIF drops, fake vouchers). Domain speculation + infrastructure control = financial extraction at every layer.

Token Ecosystem — 11+ Interlocking Tokens

Token	Project	Status
$GOTM / $UNISIN	GOTM Labz primary	~$0.003, 97% concentrated, ~$750 daily volume
$P4L (PUFFSTERZ)	Puffsterz	$158K mcap, $78/day volume
$BASC	BASC staking reward	No public DEX liquidity
$Daze	DakDaze personal token	No public DEX liquidity, can mint more
$FRENS	Frens Factory	Distributed via GAINZ staking
$RISE	MOB Collective	Unfindable on any DEX
$MINE	Enchanted Miners	Distributed via GAINZ staking
$THC	THC Labz	Cannabis operation token
$MLabs	MOSC	Staking shut down
$VAPE	VibeTribe	Never deployed on-chain
$CRUMBS	Pump.fun launches	Dead, $0 volume

11+ interlocking tokens with near-zero real volume. Circular dependency between projects. GOTM/PUFFSTERZ Orca trading pair proves deliberate ecosystem integration.

Security Audit — Public Infrastructure Analysis

CRITICAL — Helius RPC API Key Exposed Publicly

A publicly accessible API endpoint on gotmlabz.io returns a LIVE Helius RPC API key to anyone who requests it. No authentication required. Key: cc5ac5██-████-████-████-██████933af (partially redacted — full key retained as proof). This allows anyone to make Solana RPC calls using GOTM's infrastructure, exhaust rate limits, and cause denial of service for all GOTM Labz users.

A second unauthenticated endpoint exposes the full platform configuration via gotmlabz.io/api/admin-██████?action=get██████Settings — returns every fee amount, every fee wallet address, feature toggles, maintenance status, emergency shutoff flag, pricing tiers, and discount structures. No authentication required. Full response documented — proof retained.

CORS wildcard policy means any malicious website can harvest this data programmatically without restriction.

HIGH — Missing Security Headers On Financial Applications

4 of 5 GOTM domains are MISSING critical security headers: nftstake.app, nftlaunch.app, shift3.app, traitstore.app

These are financial applications handling wallet connections and token transfers. Missing CSP means a single XSS vulnerability could steal wallet approvals. Missing X-Frame-Options means the staking interface could be embedded in a malicious site for clickjacking. Users connecting wallets to these sites have reduced protections.

Only gotmlabz.io has proper security headers (behind Cloudflare with CSP, HSTS, X-Frame-Options, Permissions-Policy). The 4 app domains are directly on Vercel without Cloudflare protection.

MEDIUM — Additional Security Concerns

Catch-all route on nftstake.app: Requests to .env, robots.txt, /api/ all return HTTP 200 with the app page. Security scanners may falsely report the site as "clean."

Punitive staking exit penalties: 75% SOL fee + 90% reward loss for early unstaking. Lock periods of 180-360 days. Users are effectively trapped — if the project has issues, exiting costs most of your funds.

Single fee wallet for ALL services: ALKQ4fKN... receives fees from 14 different tools (token create, NFT mint, burn, send, update, etc). Single point of control.

35+ wallet addresses hardcoded in client-side JavaScript: Full tokenomics wallet mapping visible in the main JS bundle — emissions, liquidity, marketing, team, treasury, burn wallets all exposed.

Firebase project shared across services: Project trait-store is used by both gotmlabz.io and nftstake.app. Single database backing multiple financial applications.

No public source code or audit: GitHub org has zero public repos, zero public members. No evidence of smart contract audits for the staking platform managing 3,093 NFTs worth ~8,500 SOL at floor.

security.txt points to orbisonsol.io: The /.well-known/security.txt canonical URL references Orbis, confirming the GOTM-Orbis relationship in their own security configuration.

Fortmatic/Magic verification key exposed in HTML meta tags across nftstake, nftlaunch, shift3, traitstore. Key value redacted — proof retained.

GOTM Labz EXPOSED