GOTM Labz / Rico (@moon_blaze_) — Full Investigation · Binance link PROVEN

NEW EVIDENCE — 2026-05-02 Cross-referenced on-chain, registry, court, social, and CEX-label data sets

Deep Dive — May 2 2026 Expansion

⚡ HEADLINE FINDING — 2026-05-02

Rico cashed in via BINANCE — proven on-chain.

The CEX-label sweep on the rico.sol ancestry chain returned a direct match: hop-4 wallet CGL1pTCjTE5iDhhVfHGuAatXMZJvrWRsaGJa3r8tNkub received 0.392 SOL directly from a known Binance hot wallet 5tzFkiKscXHK5ZXCGbXZxdw7gTjjD1mBwuoFbhUvuAi9 on 2024-03-17 in tx 4XzooXE1EmR7weJNU4x1mSzr155v76jLKNBJAggxBRVU2wz9Dy9YXKXytodEhAu7NNApvU9XDZiKFWmuFAddVEDX. Confidence: PROVEN.

FULL ATTRIBUTION CHAIN:

Binance hot wallet 5tzFkiKs…uoFbhUvuAi9

↓ 0.392 SOL — 2024-03-17

CGL1pTCj…tNkub (hop-4)

↓

H6F3FsoC…WUrXr8n (hop-3)

↓

2ojv9BAi…WGHG8S (hop-2)

↓

7hbhuSmu…dtRayg (hop-1)

↓

→ rico.sol (6KBkFss…GWxt)

Why this matters: the chain links a real-world KYC'd Binance account to Rico's pseudonymous wallet. Binance complies with regulator subpoenas under MAS, MiCAR, and FinCEN MOUs — the chain-of-custody for a regulator request is now sitting on-chain as a 0.392 SOL transfer. There is also a SUGGESTIVE Binance relay one hop further (`H6F3FsoC…` was funded entirely by `CGL1pTCj…`, inactive 2+ years), which means the chain back to Binance is a single straight pipe.

⚡ HEADLINE FINDING — 2026-05-02

4 CEX paths PROVEN — Binance × 2, Coinbase × 2 — plus operator alt-wallet identified.

The full 5-hop ancestry walk + outbound deposit trace surfaced FOUR independent CEX-attribution paths into and out of the cluster, and identified 81Y8o331aQoTrLnJWxUcuJoRriehNnWfFmaXssikGXSt as the operator's setup-and-trading alt-wallet that funded both Rico's main wallet AND the $GOTM token deployer.

PATH 1 — Binance Hot → rico.sol (PROVEN)

5tzFkiKs…uoFbhUvuAi9 [Binance Hot]
→ CGL1pTCj…tNkub (0.392 SOL, 2024-03-17)
→ H6F3FsoC → 2ojv9BAi → 7hbhuSmu → rico.sol
tx 4XzooXE…VEDX

PATH 2 — Binance Hot → MOSC staking admin (PROVEN, NEW)

5tzFkiKs…uoFbhUvuAi9 [Binance Hot]
→ D8pSxmPj…jBgL (1.54 SOL, 2023-12-05)
→ DzoaYiU1…WmM8P (MOSC staking admin)
tx 5Xmo7N9Qksn…t1aq · D8pSxmPj's only known activity is funding the MOSC fee wallet

PATH 3 — Multi-CEX aggregation relay → Aevon insider funder ancestors (PROVEN)

Crypto.com Hot 2 (AobVSwdW…) + Binance Hot (5tzFkiKs…) + Coinbase
→ 4cMZhSW…PjfoP (high-velocity aggregation relay, 500–1400 SOL batches)
→ 5g7yNHyG (599 SOL, 2026-05-08, sig 3kUKZPWV…) → 72L2 (Aevon insider, +10.96 SOL)
→ GJRs4FwH (580 SOL, 2026-05-08, sig 4j1SWQB4…) → HqdjUGJL → 8XVR (Aevon insider)
A single relay receiving same-day large-batch SOL from THREE CEXes simultaneously, then fanning out to Aevon's pre-mint insider funder chain. No legitimate business reason for one entity to receive from all three CEXes at once. Full receipts on Aevon Day-2 PROOF H →

PATH 4 — gainz.sol → Coinbase deposit (PROVEN, OUTBOUND)

gainz.sol (9sFfihSu…rLAf)
→ RBrmbygcp…DcT (Rico's Coinbase deposit address)
→ RBHdGVfD…DNvx (Coinbase institutional SOL hot wallet)
47 SOL ($10,073) across 35 deposits over ~14 months · RBHdGVfD provably created RBrmbygcp on 2023-04-04 in tx 49ReLhy2…5npg, confirming Coinbase customer-address architecture · RB-prefix factory FTzLSUre…H9bt has public source: COINBASE label

CONVERGENCE WALLET — same person controls Rico's main + $GOTM deployer

81Y8o331aQoTrLnJWxUcuJoRriehNnWfFmaXssikGXSt funded BOTH:

→ moonblaze.sol (1 SOL, 2023-01-08, tx 5MJybniW…yzNM) — 9 minutes after receiving its own 3 SOL from SHFLUUUR…

→ gangsofthemeta.sol via relay AV6fE6jU (April 2024, tx 2tYKNAfc…6JKj)

Same wallet seeded the founder identity AND, 16 months later, the $GOTM token deployer. Still active May 2026 (NFT trading on MOB collection). This is Rico's pre-pseudonym setup wallet — the strongest single-address identity signal in the cluster.

Subpoena targets:

Binance → records for D8pSxmPjUAam8uJA6vnWztj5q1N63BC8aUBuCC2zjBgL (born from Binance Hot, only-known-activity = MOSC fee funding)

Binance → records for the account that withdrew to CGL1pTCj…tNkub 2024-03-17

Crypto.com / Binance / Coinbase → records for the controller of relay 4cMZhSWFhcEEyU8DTGwvdN4Y2sfdAgT4xPu8EaiPjfoP (received simultaneous 500–1400 SOL batches from all three CEXes May 2026, then fanned out to Aevon insider funder ancestors)

🚨 OPERATOR CLUSTER ACTIVELY BEING SEEDED — 2026-05-02

Two leaf wallets in the rico.sol / gangsofthemeta.sol ancestry chain were created today, 2026-05-02, and funded minutes before our forensic run:

81Y8o331aQoTrLnJWxUcuJoRriehNnWfFmaXssikGXSt — operator alt-wallet (Rico's setup wallet from Jan 2023); recently received 0.1 SOL from DHn8qhEj… on the day of our run, also bought MOB #1153 on Magic Eden in May 2026 = still active.

7hbhuSmuF58m79H34ZWsghV7eHWZojqVaaLpd9dtRayg — direct funder of rico.sol; itself funded by 2snHHreXbpJ7 ← A95pt5WBUukBhmkurE8co3yBNe7sAwhLcJi3QCR3sJNr.

Interpretation: the operator alt-wallet from 2023 is still active in May 2026 — it just received a fresh 0.1 SOL replenishment within the same 24-hour window of this forensic sweep. The cluster is not dormant.

🔄 5 OF 6 "OFF-RAMPS" ARE CIRCULAR FLOWS — VOLUME WASHING, NOT EXITS

Re-running the off-ramp set with circular-flow detection collapsed the exit picture. Five of the top six "off-ramp" destinations send funds back into the cluster:

Off-Ramp	Loops Back To	Return Tx	Verdict
7yc6dHTN…L4VJ	gainz.sol	656rz346…	WASH LOOP
27N5zZpc…RMns	moonblaze.sol	5z3aNm48…	WASH LOOP
5LhfxVuo…xcBi	vibetribe.sol	1243FSGy…	WASH LOOP
GzJpRjMv…DWSo	vibetribe.sol	dxNzXKKV…	WASH LOOP
7rNVFMKt…EVqA	thclabz.sol	3ZmCPCms…	WASH LOOP
RBrmbygcp…DcT	Coinbase hot wallet	CEX sweep	COINBASE DEPOSIT

The single external exit: RBrmbygcpNPGJ9Ld5RxkDvmHNYj1hNp4qjRkMHfdDcT — Coinbase customer deposit address (Path 4 above), $10,073 from gainz.sol across 35 txs over 14 months. Coinbase auto-sweeps to its institutional hot wallet RBHdGVfD…DNvx. The other 5 destinations are all internal wash loops (cluster cycles SOL through token-dump wallets to inflate apparent volume).

Pivot wallet (priority next-hop target): ARu4n5mFdZogZAravu7CcizaojWnS6oqka37gdLT5SZn appears as both off-ramp rank-6 (receives from thclabz, INTERMEDIARY, vibetribe) AND directly funds leaf Habp5bnc…64E96. It is the internal consolidator that bridges outflow and inflow graphs — single strongest pivot for the next forensic pass.

⚠️ NFT WASH AUDIT — 87% TO 89% FAKE VOLUME PROVEN ON 4 COLLECTIONS

Magic Eden trade-history sweep across the GOTM DAO + Haizeel-art ecosystem returned hard numbers. Wash detection ran four signal layers: bilateral pair frequency, self-trades (buyer == seller), hub-spoke topology, and sub-0.5 organic score. Lifetime volume is ME's API total, not our sample.

Collection	Wash %	Lifetime SOL	Verdict	Top Wash Signal
SoDead	87.3%	167,190	WASH_TRADED	Self-trader Gf7K7jX1... ran 37 self-trades (6.25 SOL floor pump). Pair 6Fvw…↔DwnN… = 38 trades, 9.5 SOL.
Candies	89.0%	5,444	WASH_TRADED	Hub qkR1eaMq… routes 11–19× exclusive trades with 3 spokes. Pure hub-spoke topology.
Gaimin Gladiators	79.1%	52,151	WASH_TRADED	Bot B9LzBnUR… ran 132 trades. Organic score 0.27.
Puffsterz	45.0%	1,458	MIXED	50-wallet overlap with SoDead cluster. Reconfirms prior 92% finding on different windows.

SoDead royalty extraction crosschecks: at the standard 5% creator-royalty rate, lifetime volume of 167,190 SOL implies ~8,360 SOL routed to royalty wallets. The "$350K post-rug royalties" claim from prior research checks out within an order of magnitude at SoDead-era SOL prices.

CROSS-COLLECTION OPERATOR CLUSTER — 2 wallets active in ALL 4 wash collections:

PRIMARY OPERATOR: 3Y6ckGWaWsxf3PBaBV4ScgzhkmR8PDBR6nB2k7LhAMFp — bilateral wash hub across SoDead + Puffsterz + Gaimin + Candies

SECONDARY OPERATOR: 6yrqo2X4udNDdxDYmHnMy291Kxg6z8ZV66nNvaem8e7g — same 4-collection footprint

Wash-executor wallets (3 collections each): 6Fvwa3cP…, FQ7Rut6c…, AWELZv3j…, xm3RuFFp…, GkmParcG…, DeTrzEGF…, 5Cyucs2N…

Cross-collection wallet overlap: SoDead↔Puffsterz 50 shared wallets, SoDead↔Gaimin 41, SoDead↔Candies 16, Puffsterz↔Candies 16. Orbis sits isolated (12 traders, no overlap) — consistent with "abandoned" status.

🏷️ THCLABZ.SOL HOLDS 128 SNS DOMAINS — CANNABIS, SOLANA-PROTOCOL SQUATTING, FLORIDA TELL

Wallet H6n2bv6p…6DUg (a.k.a. thclabz.sol on Bonfida) holds 128 SNS domains — a domain-warehouse of operator intent. Bucketed by theme:

CANNABIS (21 domains)

weedfarm, ganjagoddess, jointroller, stonersrus, ganjapedia, thestonedape, intelligentstoner(s), weedmemecoin, thclabz, hemptherapy, stonedlife, puffvalleystx, etc.

SOLANA PROTOCOL SQUATTING (16 domains)

solanasniffer, wolfswap, hivemapper, franciumdefi, marinadeselect, wardenprotocol + 10 more — live-protocol name squatting sets up phishing / brand-confusion playbook.

FLIPPA OPERATOR (6 domains)

flippa, 0xflippa, aiflippa, flippaflips, flipcashapp, flipaholic — this wallet IS the on-chain "Flippa" brand operator.

FLORIDA GEOGRAPHY 🚨 (4 domains)

floridalife, floridaguy, floridaborn, floridaboy — strong geographic tell. Combined with Puffsterz LLC = registered Florida entity, the operator is almost certainly Florida-based, not UK as the "Ltd" suffix suggests.

GAMBLING (5)

bettingpro, diceyhq, gambleverse, mooncatbets, dubclub

FACTION BRAND (3)

factionset, fullfactionset, fullfaction

Separate finding — gainz.sol (9sFfihS…rLAf) holds 18 SNS, 7 of which are blue-chip trademark squats:

Trademark squats: exxon.sol, overstock.sol, coca-cola.sol, capitalone.sol, american-express.sol, pixar.sol, gofundme.sol. Plus 2 pharma squats: oxycodone.sol, pills.sol. The owner of gainz.sol is parking trademarks of major US corporations on-chain — a classic resale/phishing setup pattern.

💸 OFF-RAMP DISTRIBUTION MESH — 17 MICRO-WALLETS RECEIVE IDENTICAL TOKEN PACKETS

Outflow analysis on the 9 GOTM cluster wallets (1,500-tx ceiling per wallet, ~$197K total outflow tracked) shows the operator's payout pattern. The shared intermediary 3c6eWvT…omJk ($83.7K outflow, 1,673 token transfers, only 2 SOL transfers) and vibetribe.sol ($38.2K outflow) fan tokens to 17+ micro-wallets in nearly identical packets — typical mints CmjqB21B…, 9Azq2bP1… (P4L), AAqZ6CEC…, FiLSun9C… — each receiving 40–146 transactions of the same 4–5 token mints in matching amounts.

Top 6 SOL off-ramp destinations (the few with high SOL value, low tx-count = textbook CEX-deposit fingerprint):

Rank	Address	USD	SOL	Txs	From
1	7yc6dHTNQKnMvD4ZwTXdqfYUg2mqTo3yPvQ61wn1L4VJ	$16,950	113	10	gainz.sol
2	RBrmbygcpNPGJ9Ld5RxkDvmHNYj1hNp4qjRkMHfdDcT	$10,073	67.15	35	gainz.sol
3	5LhfxVuo2g8FRFUSVpbbChntwwyHNAh1tqRBaEgvxcBi	$5,833	38.89	43	vibetribe.sol
4	27N5zZpcu5srvVDq3nSgnXa1KhKub7wTKEJ8kczVRMns	$5,453	36.35	4	moonblaze.sol ⚠️
5	GzJpRjMvsj8EtEmUtoD7wVL97McjSJZhpJ9NcDgSDWSo	$2,061	13.74	5	vibetribe.sol
6	7rNVFMKtvCjiQew6K1xQb1po3BUoFnNsNNXsh1zUEVqA	$2,057	13.71	5	thclabz.sol ⚠️

CEX deposit confirmed: Row 2 (RBrmbygcp…DcT) is Rico's Coinbase deposit address — see Path 4 in the headline card. Rows 1, 3, 4, 5, 6 are all circular wash loops back into the cluster (see "5 of 6 off-ramps are wash loops" card above) — internal volume manipulation, not exits.

No cross-chain bridge events detected — operation stayed on Solana. No Wormhole / deBridge / Allbridge / Mayan tracks.

🏛️ REGISTRY SWEEP — 9 OF 10 BRANDS HAVE ZERO LEGAL EXISTENCE

Searched UK Companies House, SEC EDGAR (full-text + company register), and adjacent registries for every claimed entity in the GOTM ecosystem. Registry-access notes saved alongside.

Claimed Entity	UK CH	SEC EDGAR	Status
GOTM Labz Ltd	NOT FOUND	NOT FOUND	"Ltd" claim is FALSE — UK Companies Act 2006 s.33 offense
Gangs of the Meta / GOTM DAO	NOT FOUND	NOT FOUND	No corporate identity, anywhere
Immortal Labs ($HEM)	NOT FOUND	NOT FOUND	$HEM token issuer has no legal wrapper
THC Labz / The Growerz	NOT FOUND	NOT FOUND	GROWERZ LTD (No. 13808480) at 20-22 Wenlock Rd London = known shell-formation address; almost certainly unrelated
Halo Labs	EXISTS — UNRELATED	EXISTS — UNRELATED	HALO LABS LTD (UK 10975178) Cheshire 2017 + Halo Labs LLC (CIK 0001460194) NY 2009 — crypto entity is brand-squatting
Respawn Ring	NOT FOUND	NOT FOUND	Claims to control DegenSX + BunniesNHomies IPs without registration
Universal Node	NOT FOUND	NOT FOUND	Token recipient with no entity
MOB Collective	NOT FOUND	NOT FOUND	$RISE issuer with no entity
GAINZ NFTs / GAINZ Labs	NOT FOUND	NOT FOUND	Rico's flagship — no entity
Mutants On Sol / MOSC	NOT FOUND	NOT FOUND	3,500-supply collection, no entity
MNK3YS / MNK3Y Labs	NOT FOUND	NOT FOUND	"Deano" project, no entity

Bottom line: 9 of 10 brands operate with zero corporate registration. The lone exceptions (Halo Labs UK / NY) are pre-existing real businesses being squatted on by the crypto project. There is no legal entity to sue, serve subpoena on, or hold accountable. That structure is the product, not an oversight.

⚖️ COURT RECORDS — ZERO FILINGS ACROSS ALL ENTITIES (ENFORCEMENT GAP)

CourtListener / RECAP, CFTC PressRoom + Enforcement search, SEC litigation index, DOJ + USPIS portals: zero hits on every searched term — GOTM Labz, Gangs of the Meta, GOTM DAO, Immortal Labs (+NFT filter), Halo Labs (+crypto filter), THC Labz, The Growerz / Puffsterz, Respawn Ring, Mutants On Sol, SoDead (+rug filter), moonblaze, Haizeel Hashnan.

Why the null result is itself a finding: THC Labz shipping cannabis interstate via USPS is a federal felony under 21 U.S.C. § 841/843 and 18 U.S.C. § 1716 (USPIS jurisdiction), with potential mail-fraud predicate (18 U.S.C. § 1341). Repeated rug pulls across SoDead / GOTM / MOSC / Respawn could support SEC unregistered-securities or wire-fraud theories. Yet nothing has been filed. Plausible explanations: (1) Haizeel is Malaysia-based, hard US personal jurisdiction; (2) per-victim losses small enough that no individual plaintiff has resourced civil suit; (3) THC Labz cannabis ops may not yet have generated a USPIS referral. The null record is not exculpatory — it is an enforcement gap.

🌳 FUNDER ANCESTRY — 5-HOP WALK BACK

Walked the inbound funding chain back 5 hops on each cluster wallet via on-chain trace, taking the first inbound SOL each time.

rico.sol (5 hops): 6KBkFss…GWxt ← 7hbhuSmu (2024-01-08, 0.001 SOL) ← 2ojv9BAi (2021-09) ← H6F3FsoC ← CGL1pTCj ← 88xTWZMe…XMAZ [terminus, 2021-09-08]

gangsofthemeta.sol (4 hops): 3RU8XgEb ← AV6fE6jU (2024-04-04, 0.539 SOL) ← 81Y8o331 ← 2sj6yUtdkm ← UNKNOWN [terminus]

intermediary 3c6eWvT (3 hops): 3c6eWvT ← 3mBugNgL (2024-08-13, 0.5 SOL) ← EPzQ31yY ← UNKNOWN [2022-08-03]

MOSC staking admin (3 hops): DzoaYiU1 ← 4M88TKWv ← Habp5bnc ← UNKNOWN

moonblaze.sol, gainz.sol, mutantsonsol.sol, thclabz.sol — first inbound on file is too old to trace cleanly; ancestry walk terminated at 1 hop. CEX label-resolution pass folded into Path 4 above.

Status: initial pass terminated at 4 leaf wallets (88xTWZMe, 2sj6yUtdkm, EPzQ31yY, Habp5bnc) without a CEX tag. The follow-up label-resolution sweep folded into the headline card above (Path 1, Path 2, Path 4) supplied the missing attribution.

🐦 X PROFILE INTEL — 9 OF 11 TARGETS CAPTURED

X profile audits across 11 targets in the GOTM network. Health scores computed from cadence, engagement-rate, format mix, hook performance.

@moon_blaze_ (Rico, GOTM founder)

5,003 day age (since 2012-08), 3,010 followers, bio "Founder @GotmLabz web3 solutions & @GAINZNFTs". Health 68/100. Cadence 0.2 posts/day = algo dead. ER 5.8% (above CT median). Reply graph: zero outbound replies — the founder doesn't engage in conversations. Top inbound mention: @ReeceSolana (6 mentions). Top posts are all GAINZ giveaway RTs.

@MutantsOnSol

Health 77/100. ER 10.8%. 20 sample tweets, 60% replies. Top: "Ghost Rider" reveal (126♥/54🔁/57💬). Top inbound mention: @rbdaog (5×) — and notably @XGinsu (Frens Factory) mentioned 1×. Inbound only, zero outbound = same broadcast pattern.

@Prim_1988 (GOTM team)

Inbound mentions cluster the network: @live4fun67 (3×), @puffsterznfts (1×), @SiNftGod (1×), @cryptoflan (1×) — confirms the GOTM/Puffsterz cross-mention loop and proves @Prim_1988 is in our ecosystem orbit.

@live4fun67 (Jolanda) — Belle Donne DAO co-host minting on @GotmLabz (2026-05-15 re-verify)

200-tweet primary capture: 25,677 lifetime tweets, posting peaks 09-11 UTC + 20-21 UTC (EU timezone). Recent feed is ~95% crew amplification — @Omerta_SOL ×48, @GAINZNFTs ×23, @BelleDonneDAO ×17, @DMSTsol ×16, @OrbisOnSOL ×14, @GotmLabz ×13, @puffsterznfts ×12, @VibeTribe_NFT ×5. Follow-graph: 17 of 23 catalogued crew handles followed (incl. @dak_daze, @SWISS_SOL, @SiNftGod, @Prim_1988). Operationally embedded: listed as co-host of the Belle Donne DAO mint, a sub-DAO of @Omerta_SOL minting on @GotmLabz / shift3.app. Promotes the closed-loop $GOTM staking economy on every Belle / Vinnies / DKV / Pandarianz post. Upgrades the cross-mention-loop classification on @Prim_1988 above: live4fun67 is not just a community filler — she is a participating operator on a GotmLabz-launched sub-DAO.

@SiNftGod (sends Rico recurring USDC)

100% replies, zero originals. Engagement rate 4.7%. Reply targets & mentioners cluster on @puffsterznfts (3 mentions in/1 out) — confirms @SiNftGod = Puffsterz operator in the Rico-payment loop.

@HaizeelH (Haizeel Hashnan)

Top tweets are about @LittleGuysWorld ("So proud to see my design coming be a real life product"). Reply graph: outbound to @DonDomingoNft, @LittleGuysWorld. Mainstream press (VulcanPost / MMU Alumni) confirm Malaysian artist, MMU Cyberjaya 2013 grad, Pelempunk creator — all already self-disclosed publicly.

@SWISS_SOL · @DegenSX

9 of 11 targets captured this pass; these 2 deferred to next sweep.

Evidence: 9 individual x-audit-<handle>.md files saved alongside the deepdive folder.

🕸 FLORIDA-CREW AMPLIFICATION RING — 2026-05-16 network expansion (61-handle primary capture)

On 2026-05-16, a public post from @Citizen54992693 bundled @LoudLordsNFT @MutantsOnSol @BoredApeSolClub @D3fenders @Rough_Ryders @WegenNFT @Frens_Factory @okaybears @GotmLabz into a single trait-store mint push, and @TonenUp (LoudLords founder per his own bio) confirmed the trait-store URL is hosted at gotmlabz.io/traitstore/loud-lords. We pulled 200 tweets + full follow-list for 61 handles and scored each on three independent signals: (1) crew-follow-edge count, (2) crew-mention frequency, (3) appearance of Florida-crew launchpad/marketplace domains (gotmlabz.io · shift3.app · orbisonsol.io · nftlaunch.app · raffle.mobtools.in · launchmynft.io · flip.gg) in posted URLs.

Operational venue stack (smoking-gun launchpad URLs):

Operator handle	Domain	URL captured	Mechanic
@LoudLordsNFT	gotmlabz.io ×8	gotmlabz.io/traitstore/loud-lords	Trait store + free-mint mechanic (lootbox-under-NFT-wrapper)
@MutantsOnSol	shift3.app ×1	shift3.app/swap/mosc	$MOOSE → Mutant V2 swap UI (same domain as Belle Donne mint)
@DevilsSOL666	orbisonsol.io ×2	orbisonsol.io/marketplace?ref=PFZGN	Secondary-market launch; tweet credits "the builders 🔥 @moon_blaze_"
@ThePandarianz	nftlaunch.app ×8	nftlaunch.app primary mint	Pandarianz Gen1 mint; followed by 41 crew handles (highest in the ring)
@THC_Labz	orbisonsol.io ×2	Orbis listing	Same secondary venue
@Digitoss_sol	raffle.mobtools.in ×15	MOB raffle tool	Self-declared "Omerta Don" + Fox Club manager
@JustinGainz	orbisonsol.io ×55	Bare Orbis referral spam	130-follower account, empty bio — pure paid amplifier (already in BASC investigation)

Tier 1 — self-declared operators / founders (bio evidence):

@TonenUp bio: "Founder @LoudLordsNFT" — LoudLords + GotmLabz trait-store linkage
@SWISS_SOL bio: "C.T.O. || @VibeTribe_NFT 》@puffsterznfts 》@PuffsterzInk 》@P4L_Puffsterz" — one CTO across 4 brands
@XGinsu bio: "@frens_factory | @boredapesolclub" — same person sits on Frens_Factory team AND BASC team; bridges those rings
@_Benksy_ — Frens_Factory founder (per Frens bio)
@DJSOL98 — ThePandarianz founder (per Pandarianz bio); creates the art
@Saxiaaanft — AevonNFT founder (per Aevon bio; art by @jimye_)
@Digitoss_sol bio: "Omerta Don | The Fox Club Manager"
@mrwinning247 bio: "Voice of @Omerta_sol & King-Pin"
@norm44855999 bio: "Founder Bonies Revival @BoniesRevival"
@andremccray99 bio: "Bored Ape Solana Club Puffsterznfts Ambassador VibeTribe_NFT Gainz NFT" — declared cross-project ambassador
@DralcorSol bio + on-chain: BASC team (already documented); 6× @dak_daze mentions + cross-listed in suits raffle
@live4fun67 — Belle Donne DAO co-host minting on @GotmLabz (see card above)
@PurDayMon — Belle Donne DAO co-host (per @kadir_bmd's "Legends of the Empire" spaces announcement); 116 crew mentions

Network scorecard (61 handles, score is bounded 0-100): nine handles scored a perfect 100 — @LoudLordsNFT, @BOBtheCOLLECTOR, @ThePandarianz, @retrospect82, @Owltopia_sol, @PurDayMon, @RilegatoDAO, @Digitoss_sol, @Gob1_RP. Eighteen more scored 80–99 incl. @MorLillyNFT 92, @AevonNFT 87, @MutantsOnSol 84, @TonenUp 84, @BASC_SuitsDAO 82, @SWISS_SOL 88, @andremccray99 80, @DralcorSol 80. The four "tagged but not crew" handles — @okaybears 29, @D3fenders 41, @ForzaNft 6, @AbnormalMfers 12 — show clean separation: the scoring rejects co-opted partners (Okaybears uses @OrbisOnSOL for 3D rigs but isn't crew operationally) and an external Web3-security product (D3fenders).

STEAMX-side cross-check: the same scorecard applied to @OnlyPetes 28, @B_O_T_NFT 12, @DegenSX 15 shows STEAMX is a distinct but adjacent ring — the Florida-crew ↔ STEAMX overlap runs through @SWISS_SOL 88, not the STEAMX brand handles themselves. This matches our existing thesis ("same set, two faces") on the SteamX page.

Verdict on the user's 2026-05-16 lead: Aevon, Puffsterz, Loud Lords, Mutants on Sol, BoredApeSolClub, Pandarianz, Devils on Sol, THC Labz, Frens Factory, Lunardollz, GoofyGiraffes, Pepe Gods, StonedSloths, DMST, Omerta — single Florida-crew operational ring centred on @moon_blaze_ (Rico, GotmLabz founder), @dak_daze (BASC founder) and @SWISS_SOL (Puffsterz / VibeTribe CTO), running the gotmlabz.io → shift3.app → orbisonsol.io mint/swap/secondary stack. Northlanders, Wegen, Rough Ryders, AbnormalMfers and the named amplifier accounts sit in the orbit but are not core operators.

Evidence: 61 per-handle primary captures + a combined scorecard JSON saved at data/evidence/florida-crew-ring-2026-05-16.json. Full follow lists and mention histograms held internally.

🔗 WALLET ATTRIBUTION — 40 crew operator wallets resolved on-chain (2026-05-16)

Primary on-chain Solana Name Service (SNS) reverse-lookup pass against 120 candidate names. 40 resolved — the strongest available primary-source link between an X identity and a Solana wallet. Each row below is the cryptographic controller of the named .sol domain at the time of capture.

🚨 Concealed-alt finding (PROVEN on-chain): wallet H6n2bv6p…6DUg simultaneously controls thclabz.sol AND owltopia.sol. THC Labz and Owltopia are presented on X as separate projects with separate brand identities — @THC_Labz (1,901 followers, "in-development ecosystem powered by $THC") vs @Owltopia_sol (raffle/marketplace partner with crew score 100). On-chain SNS data shows one human operates both. Latest activity on this wallet: 2026-05-15 (yesterday).

SNS name	Owner wallet	X handle	Role / note
rico.sol	6KBkFss3…uGWxt	@moon_blaze_	Rico / GotmLabz founder
moonblaze.sol	w2ekw7Xw…NTnHW	@moon_blaze_	Rico secondary SNS
dakdaze.sol / dak_daze.sol	5Ym11hxc…R2yGP	@dak_daze	BoredApeSolClub founder; same wallet owns both name forms
swiss.sol	66LJgC47…QpbWQ	@SWISS_SOL	Puffsterz / VibeTribe CTO
thclabz.sol	H6n2bv6p…6DUg	@THC_Labz	Same wallet also owns owltopia.sol — concealed-alt PROVEN
owltopia.sol	H6n2bv6p…6DUg	@Owltopia_sol	Same wallet also owns thclabz.sol — concealed-alt PROVEN
gainz.sol	9sFfihSu…brLAf	@GAINZNFTs	GAINZ NFTs project wallet (matches Coinbase-deposit wallet from prior deepdive)
mutants.sol	H2gcFE45…PWMok	@MutantsOnSol	Mutants on Sol project wallet
omerta.sol	9sVBzX6K…bndHY	@Omerta_SOL	Omerta project wallet
puffsterz.sol	HT8sxFwB…rrv67	@puffsterznfts	Puffsterz project wallet
vibetribe.sol	4rcgnFxd…6dnwp	@VibeTribe_NFT	VibeTribe project wallet
vincenia.sol	HAvaPYSU…ykazd	@Vincenia_NFT	Vincenia NFT project wallet
monkeylabs.sol	BfkDvBuw…mLz7E	@mnk3ylabs	MNK3Y Labs project wallet
lunardollz.sol	DtU8dasD…V5im	@LunardollzNft	Lunardollz project wallet
lunarpro.sol	LDZY4CQR…rd6F5	@lunarpro	Vanity address starts with LDZ — matches Lunardollz token ticker; operator-generated vanity wallet
belledonne.sol	8pmN9Zrv…wjY3k	@BelleDonneDAO	Belle Donne DAO project wallet (Omerta sub-DAO)
rilegatodao.sol	7pbXRBNU…wQUf	@RilegatoDAO	Rilegato DAO (Omerta sub-DAO)
aevon.sol	72srK7fa…8gawo	@AevonNFT	Aevon NFT project wallet (separate from the jorgieboy.sol operator)
devils.sol	9j3pc3gt…VP5Bu	@DevilsSOL666	Devils on Sol project wallet
frens.sol / frensfactory.sol	QKK2JXQB…jnt3tt / 9AVFfgvu…K8hY29o	@Frens_Factory	Two separate Frens-named wallets (different owners)
benksy.sol	BCVFVHWs…hD3jCe	@_Benksy_	Frens_Factory founder per Frens bio
xelementia.sol	FpHsJ9Mn…qwgND	@XElementia	XElementia raffle platform (BASC dakdaze-controlled per master)
pandarianz.sol / thepandarianz.sol	3cujgjQA…jnUS8Aj	@ThePandarianz	Same wallet owns both name forms
steelcity.sol	H5Cf9UsS…Q2PkzPM	@SteelCity_NFT	SteelCity NFT
sodead.sol	GTTgaMQw…Wsbxjc	@SoDeadNFT	SoDead NFT (previously flagged 87% wash-traded on 167K SOL volume in the GOTM deepdive)
kadir.sol	BqGHiyni…8TmjkM	@kadir_bmd	Omerta cluster amplifier
cronicles.sol	6qasrabZ…QuFUKE	@Cronicles	Crew amplifier
citizen.sol	DNcxF8Mk…cXEuF	@Citizen54992693	Crew amplifier (the bio "in2" list account that posted the 2026-05-16 LoudLords multi-tag promo)
goofygiraffes.sol	R4fHhwos…7A52G	@GoofyGiraffes_	Goofy Giraffes project wallet
northlanders.sol	9Ty8Wpod…vgPQwG	@northlandersnft	Northlanders NFT (Spoils-of-the-North treasury holds $GOTM/$RISE/$LDZ tokens)
noldorholder.sol	yua53Dr9…sytwhcz	@NoldorHolder	Confirms BASC investigation entry
dralcor.sol	D7euki5k…UpqK3	@DralcorSol	Confirms BASC investigation entry (team member)
jorgieboy.sol	ASTyfSim…rg7iaJZ	@jorgieboy / ASTy	Aevon operator wallet — confirms Aevon Day-2 entry

Behavioural alt candidates — top similarity pairs: The behavioural-similarity pass on the 61-handle capture identified pairs where cosine-similarity on shilling-targets, cosine-similarity on posting-hour histograms, and Jaccard similarity on the follow-list were all simultaneously high. The top non-trivial pairs (a "trivial" pair being one where one handle is the bio-declared founder of the other, e.g. @ThePandarianz↔@DJSOL98 at 0.82, @LoudLordsNFT↔@TonenUp at 0.77 — both expected): @Digitoss_sol ↔ @Gob1_RP at 0.74 (different stated timezones but 0.73 follow-list overlap), @RilegatoDAO ↔ @Digitoss_sol at 0.72 (both Omerta cluster), @PurDayMon ↔ @Digitoss_sol at 0.71. Behavioural similarity alone is not a same-human claim — it could also be a tightly-coordinated raiding cell — but it identifies the highest-value targets for on-chain wallet-overlap follow-up.

Evidence: 40-row wallet attribution JSON saved at data/evidence/florida-crew-wallets-sns-2026-05-16.json; behavioural-similarity scorecard derived from the 61-handle capture. Anything not marked PROVEN remains a behavioural lead until corroborated by wallet overlap.

🌐 NAMESPACE OVERLAP — on-chain SNS portfolios prove brand-stacking by single operators (2026-05-16 chain forensics)

A reverse-namespace pass on the resolved wallets above — "what other .sol domains does each operator own?" — produced four operator clusters that put the Florida-crew thesis on primary chain data, not social inference.

🚨 THC Labz / Owltopia operator wallet owns 129 .sol names — including a literal Florida + Flip.gg signature

Wallet H6n2bv6p…6DUg (proven controller of thclabz.sol + owltopia.sol) holds 129 .sol domains. Notable subsets:

Florida self-identification: floridalife.sol, floridaborn.sol, floridaboy.sol, floridaguy.sol. One human registered four Florida-themed names — on-chain corroboration of the Florida-crew geography thesis from 2026-05-09.
Flip.gg operational namespace: flippa.sol, flippaflips.sol, 0xflippa.sol, aiflippa.sol, flipcashapp.sol, flipaholic.sol. Five-plus Flip-branded names from the same operator who runs THC Labz — the Flip.gg laundering-venue connection documented in the GOTM deepdive Proof F + G is now on-chain at the namespace layer, not just at the seed-funding layer.
BASC + cannabis-NFT signature: boredapeclub.sol, puffvalleystx.sol, stonedapebiz.sol, thestonedape.sol, ganjapedia.sol. Same operator squatting BASC-adjacent + the cannabis/THC-themed namespace that maps onto Puffsterz' own LLC framing (smoke-shop / cannabis-adjacent).

Verdict: the same human controls the THC Labz X identity, the Owltopia X identity, the Florida-self-identifying namespace, and the Flip.gg namespace. The "different projects" framing on X is presentational; on-chain identity is one operator.

🚨 XElementia wallet owns three BASC-branded SNS names — on-chain proof of the BASC investigation's "dakdaze-controlled XElementia" call

Wallet FpHsJ9Mn…qwgND holds xelementia.sol + bascbullet.sol + bored_ape_solana_club.sol + bored-ape-solana-club.sol. The BASC investigation registry lists XElementia among the 14 "dakdaze-controlled" accounts on the basis of behavioural + funding evidence. Today's SNS data closes the loop — one wallet controlling four BASC-themed names is the on-chain equivalent of admitting it.

jorgieboy.sol = the MEXC operator wallet from the Aevon Day-2 investigation (now SNS-proven)

SNS resolves jorgieboy.sol to ASTyfSim…rg7iaJZ — the exact wallet labelled "MEXC operator" in the Aevon Day-2 banner (the 10.14 SOL Binance Hot funding on 2026-05-01). The X handle @jorgieboy is now PROVEN to be the same human controlling the MEXC ASTy operator wallet.

ThePandarianz operator also owns lunarverse.sol + absurdapes.sol

Wallet 3cujgjQA…jnUS8Aj (controller of pandarianz.sol + thepandarianz.sol) also owns lunarverse.sol and absurdapes.sol. Same operator running three apparent brands — Pandarianz, Lunarverse, Absurd Apes — through one wallet.

Fresh-wallet funding burst 2026-05-13 → 2026-05-15 on six crew operator wallets

Genesis-tx traces on dakdaze.sol (0.8 SOL from 5SoVn4dw2R on 2026-05-13), omerta.sol, belledonne.sol, sodead.sol, benksy.sol, and frensfactory.sol all funded inside a 48-hour window 2026-05-13 to 2026-05-15. The pattern is consistent with bulk SNS registration paid out of a shared treasury — another behavioural signal that these are operator-aligned wallets rather than independent humans. Hop-2 funder for dakdaze is 6HJ9kmnG…JHUX; not yet labelled. Deeper funder ancestry on the long-history wallets (rico, swiss, gainz) was rate-limited at the indexer this pass — second sweep queued for tomorrow.

Evidence: extended chain-forensics evidence appended to data/evidence/florida-crew-wallets-2026-05-16.json. The 129-name THC operator portfolio and 4-name XElementia BASC cluster are primary on-chain SNS data — not modelled, not inferred.

Batch-3 founder confirmation pass (2026-05-16): a follow-up 40-handle sweep targeting the founder + team accounts surfaced by bio cross-reference landed clean confirmations:

@DJSOL98 (ThePandarianz founder per Pandarianz bio) scored 100 — 32 crew follows + 50 crew mentions + 2 launchpad URL hits. cosine-similarity to @ThePandarianz: 0.82 composite (0.96 mention overlap, 0.84 hour overlap, 0.66 follow overlap). Likely the same human running both accounts.
@Saxiaaanft (AevonNFT founder per Aevon bio) scored 74 with 63 crew mentions — behavioural similarity to @Wolfmeta_X (the account that posted the 2026-05-16 "Check out @LoudLordsNFT and @AevonNFT" cross-promo) is 0.67 composite (0.91 mention overlap). New behavioural-alt candidate.
@jimye_ (Aevon art per Aevon bio) scored 65.
@BatunosOfficial (Frens_Factory artist per Frens bio) scored 80 — 0.72 composite similarity to @effinityysol and 0.67 to @_Benksy_ (Frens founder). Effinityysol is a Frens-team alt-candidate.
@RoughRyderStage (Rough_Ryders founder per RR bio) scored 71.
@BoniesRevival (norm44855999's project handle) scored 75 — closes the loop on the "Voice of Omerta King-Pin" amplifier.
@MisterJ42082x ↔ @THC_Labz at 0.67 composite — MisterJ runs the "THC_Labz TV indicator" promo content; behavioural-alt or paid promoter for the THC operator.
New high-volume amplifiers: @cryptosavage44 100, @Rubbaduck89 100 (149-follower account, 85 crew mentions), @Jennycake82 96, @Beavis_317 88, @luckysol777 84.
Validated NOT crew (clean separation): @solflareDojo 3, @Nyx__NFT 0, @misfitsorder 4 — mentioned by crew but score near-zero. @dead_y00ts 30 — tagged but minimal engagement.

Cumulative count: 100 handles captured + scored, 40 wallets attributed via on-chain SNS, 1 PROVEN concealed-alt (THC ↔ Owltopia), 4 named operator clusters via SNS portfolio overlap, 8 high-confidence behavioural-alt candidate pairs.

🪙 TOKEN-LAUNCH FORENSICS — $GOTM & $P4L PROVEN PUMP-AND-DUMP, CLOSED LOOP

Mint resolution + first-buyer + LP-lock + holder-overlap analysis on the four GOTM-network tokens.

$GOTM — VERDICT: PUMP_AND_DUMP (medium confidence)

Mint: AAqZ6CECabwnYLm3FDqPrVQotXLPGQ3BJSfecYmXeJU5 · Deployer: 3RU8XgEb… (gangsofthemeta.sol) · Deployed: 2024-04-04 01:42:21 UTC

Funded by: AV6fE6jU… 7 minutes pre-deploy — a 3-tx burner that also holds UniSin/UNISIN (another GOTM-network token, confirms operator).

Top-10 concentration: 70.1% today (was claimed 97% earlier — likely some has traded out, still heavy).

Insider-block fingerprint: 4 round-number holdings — 50M, 50M, 41.67M, 25M — clear pre-allocation, not market accumulation.

LP: 5 fragmented pools totaling ~$47K. NONE LOCKED. · Volume: ~$8/day · No CEX outflows detected.

$P4L (PUFFSTERZ) — VERDICT: PUMP_AND_DUMP (HIGH confidence)

Mint: 9Azq2bP1AJnoPY7qi6Kgw2riyWom39tX6W9nV6XBEP4L · Deployer: 5RGTT2G8saYX… (P4L_TARGET2 loop node) · Deployed: 2025-07-07

Launchpad: custom mintUsbASLpfh4… (NOT pump.fun) — bypasses the standard fair-launch path.

Open-market launch? NO. Zero external buyers within 60 s of deploy. Token was 100% pre-allocated to insiders before public visibility.

Treasury concentration: 47.55% in AN95BSF… — a wallet with only 7 lifetime txs, seeded entirely by the deployer.

CLOSED-LOOP ECONOMY (proven on-chain):

9qXEF4 (genesis vault) → ArSR5L1z (distributor) → AN95BSF (treasury) → back to ArSR5L1z as "rev-share" → Orca pool for price support

Sellers: only insider wallets have sold (puffsterz.sol, J1H7kx).

Orca GOTM/P4L pool: 7wyiAeFf…CVrdG · $8,053 liquidity · NO LP LOCK.

Bundler: CigkFG2t (genesis 2026-02-24) — sent 1-lamport dust to 20+ wallets in 47 seconds = bundle-and-snipe pattern. Seeded the P4L deployer's funding chain.

$HEM (Immortal Labs / SoDead) + $MLabs (MOSC) — UNRESOLVED

$HEM mint not found across 8 distinct search methods. Likely dead/delisted below aggregator threshold. Closest candidate: $THC token BmwJNuAAjFdKMfE9sWFb1YJJReJJGHLFsENPLkhjLbuT (41.6M supply, $1K LP, 2023-12-11) — same network, supply mismatch.

$MLabs / MOSC mint not found. mutantsonsol.sol holds zero current tokens. $MLabs appears in Aug 2025 GotmLabz tweets but no on-chain contract resolved. Pivot: pull MOSC X CA announcement.

CROSS-TOKEN COORDINATION — PROVEN

1. vibetribe.sol holds both P4L tokens AND GOTM NFTs.

2. ArSR5L1z (P4L orchestrator) holds GOTM fungibles.

3. The same bundler CigkFG2t seeded BOTH the P4L deployer AND the P4L treasury's funding chain.

4. The Orca P4L/GOTM trading pair is operator-created — there is no organic reason for the two project tokens to share a pool.

Cross-reference with the off-ramp mesh: the multi-token packets distributed to 17 insider wallets via intermediary 3c6eWvT… include mints AAqZ6CEC… ($GOTM), 9Azq2bP1… ($P4L), plus three unidentified internals CmjqB21B…, FiLSun9C…, GaHu73uh…. We can now name two of those five tokens directly. The 1,673 token-outflow programmatic router pattern + $GOTM + $P4L pre-allocations + closed-loop "treasury → distributor → LP" economy together describe a coordinated insider-distribution-and-dump engine — not a community project.

📇 PUBLIC IDENTITY CONFIRMATIONS — primary self-disclosure only

Everything in this card is sourced from each subject's own public self-disclosure — their X bio, their portfolio site, mainstream-press interviews they participated in, or their published Linktree. No cross-platform aggregation; just the on-record facts each person has put forward themselves.

@HaizeelH — Haizeel Hashnan

Self-disclosed: Malaysian NFT artist. X bio: "NFT Artist 💧". Linktree: linktr.ee/haizeel. Portfolio: haizeel.com/web3.

Mainstream press (VulcanPost / MMU Alumni feature): originally from Penang, currently based in Selangor; graduated MMU Cyberjaya 2013 (Film & Animation); creator of "Pelempunk" NFT series on Pentas.io (245 minted, 96% sold).

GOTM-network role (verified on-chain + portfolio): sole/lead artist for THC Labz / The Growerz, SoDead, BroHalla, VendX, Little Guys World, Candies, Gaimin. Confirmed via SoDead team page + his own portfolio listings + on-chain creator metadata.

Rico — @moon_blaze_

Self-disclosed: X bio "Founder @GotmLabz web3 solutions & @GAINZNFTs", blue verified, X ID 769678490, account age 5,003 days (since Aug 20 2012 — pre-crypto). Discord tag rico4208 (per GOTM whitepaper). YouTube + Linktree + Telegram all linked to his profile.

UK-vs-Florida tension: uses British idiom ("mate", "the wifey"), entity styled as "Ltd" → suggested UK base in earlier section. The 2026-05-02 SNS sweep on thclabz.sol (operator-controlled) returned 4 explicit floridaXXX.sol domains, and the Puffsterz LLC he partners with is FL-registered. Net read: Florida-based operator who styles brand as British. The "Ltd" claim has no UK Companies House record.

Operator alt-wallet (PROVEN this run): 81Y8o331aQoTrLnJWxUcuJoRriehNnWfFmaXssikGXSt funded both moonblaze.sol AND the $GOTM token deployer.

@SiNftGod — "SIN" / Puffsterz LLC President

Self-disclosed in the Testimonials block of gotmlabz.io as "SIN" — the same handle attaches to Puffsterz LLC's public-facing presidency claim covered in the parallel Puffsterz investigation. X reply graph (this run) shows tight engagement loop with @puffsterznfts (3 inbound mentions, 1 outbound reply). Sends Rico recurring USDC on-chain.

@Prim_1988 — GOTM team

Self-disclosed Medium bio links to maskedbutaware.nl (Dutch-language autism-awareness site, contact maskedbutaware@gmail.com). Same author published "Introducing $PRINT: A Revolutionary Solana Reflection Token" (Feb 2024). Linked TikTok, Scratch, DEV.to. Tech stack on DEV.to (Next.js + Firebase + Vercel) matches GOTM Labz product stack. Geographic tell: Netherlands.

@The_Kronic_King · @SWISS_SOL · @DegenSX · @dak_daze · "Deano" @mnk3ylabs

No verified real-name self-disclosure available from primary sources. They appear pseudonymously on X with no Linktree/portfolio/press identifying them by legal name. The deepdive does NOT speculate or aggregate — only their on-chain wallet behaviour (handled in the Wash + Off-Ramp + Funder cards above) is presented as evidence. If any of these subjects publish a verified identity, we update this card.

Editorial standard: we do not aggregate cross-platform identifiers (commit emails, Gravatar hashes, etc.) on private individuals. Public-figure / self-disclosed material only. Anyone disputed below has standing to refute via the comments widget or by emailing us — we will retract or correct any claim that is not sourced.

🔄 STILL OPEN — NEXT-PASS TARGETS

✓ CEX label-resolution complete — Binance hot wallet found in rico.sol ancestry chain

✓ Token-launch forensics — $GOTM & $P4L proven pump-and-dump, no LP locks, closed-loop economy

• $HEM + $MLabs mints unresolved — pivot via @SoDeadNFT and @MutantsOnSol CA-announcement tweets / Jupiter token-list import

✓ RBHdGVfD…DNvx verified as Coinbase's institutional SOL hot wallet (RB-prefix factory FTzLSUre…H9bt with public source: COINBASE label, ~4.7M lifetime txs, RB-prefix customer-address architecture).

✓ gainz.sol → Coinbase deposit address RBrmbygcp…DcT ($10K, 35 txs over 14 months) is the PROVEN Coinbase off-ramp by the GOTM operator.

• Walk past pivot wallet ARu4n5mF…5SZn — single strongest next-target

• Florida Sunbiz manual check (Cloudflare-blocked from automation; Florida nexus now strongly indicated by 4 floridaXXX SNS + Puffsterz LLC FL)

• Malaysia SSM check on Haizeel Hashnan DBA (paid portal — manual)

• OpenSanctions / OFAC SDN screening (API key not configured)

• Pick up @SWISS_SOL + @DegenSX in next pass

• MOSC + SoDead Coffins ME trade history (no API data on creator slugs — direct on-chain pass needed)

• Forensic preservation — operator cluster still active; on-chain archive captured before any wallet rotation

SNS Domain	Wallet	Owner	Connection
moonblaze.sol	w2ekw7X...1jpi	Rico (@moon_blaze_)	Sends MOSC NFTs, receives P4L tokens from vibetribe.sol
rico.sol	6KBkFss...GWxt	Rico	SNS domains: rico, deadpool, rosalia, evan, bini
gainz.sol	9sFfihS...rLAf	GOTM ecosystem	100+ SNS domains including thclabz, gainz, weedfarm, ganjapedia, stonedlife
gangsofthemeta.sol	3RU8XgE...aPS	$GOTM token deployer	Created $GOTM token — links token to brand
unisin.sol	DuKvUgC...aRqT	GOTM ecosystem	$UNISIN "cross-community token"
prim.sol	BjSaYdg...dNm	@Prim_1988	Netherlands-based developer
thclabz.sol	H6n2bv6...6DUg	THC Labz	Cannabis shipping operation
mutantsonsol.sol	9y4rZAb...wdL	MOSC creator	moonblaze.sol transfers MOSC NFTs

Token	Project	Status
$GOTM / $UNISIN	GOTM Labz primary	~$0.003, 97% concentrated, ~$750 daily volume
$P4L (PUFFSTERZ)	Puffsterz	$158K mcap, $78/day volume
$BASC	BASC staking reward	No public DEX liquidity
$Daze	DakDaze personal token	No public DEX liquidity, can mint more
$FRENS	Frens Factory	Distributed via GAINZ staking
$RISE	MOB Collective	Unfindable on any DEX
$MINE	Enchanted Miners	Distributed via GAINZ staking
$THC	THC Labz	Cannabis operation token
$MLabs	MOSC	Staking shut down
$VAPE	VibeTribe	Never deployed on-chain
$CRUMBS	Pump.fun launches	Dead, $0 volume

GOTM Labz EXPOSED

Deep Dive — May 2 2026 Expansion

Visual Evidence — Screenshots of Live Infrastructure

Person of Interest — "Rico"

Infrastructure — The Machine Behind The Network

Wallet Forensics — On-Chain Evidence

GOTM DAO — The Connected Projects

Key Network Operators

Token Ecosystem — 11+ Interlocking Tokens

Security Audit — Public Infrastructure Analysis

The ShilliBilli Sub-Network — 80K+ Combined Followers

Connected Investigations

Comments & Evidence