The Florida-crew investigation, named.
@AiFlippa isn't just an X handle. Per his OWN public bio: "Lead amb @sns • CMO @GotSOLpay • Creator @EYEKONSTUDIO." He is the Lead Ambassador for Solana Name Service operating a single wallet (H6n2b…W6DUg) that holds 129 .sol domain names — including five Flip.gg-themed names, four Florida-identity names (the on-chain corroboration of the Florida-crew thesis from prior BASC, Aevon, Puffsterz, GOTM investigations), and the brand domains of multiple "separate" Solana NFT projects (THC Labz, Owltopia, BASC squat, Stoned Ape squat). And the same Flip.gg hot wallet that funds the gambling site seed-funded the wallet chain that controls the launchpad program every "separate" Florida-crew NFT brand mints through. Receipts below — every claim links to a transaction signature or SNS resolution you can verify yourself.
This page documents what was provable as of 2026-05-17. Since then the investigation has grown well beyond the @AiFlippa / THC Labz / Flip.gg perimeter — into a much larger multi-brand offshore-crypto-casino + lootbox-NFT + kill-to-earn-game cluster sharing operator infrastructure, dust-spray funding rails, and the same Cyprus serviced-office corporate template as Flip Games Ltd. New work in review (not yet published here) includes:
Publication cadence: PROOFs DD onward are being prepared and will be added incrementally over the coming weeks. The page below stays anchored on what is already independently verifiable on-chain today. No claim is added without a transaction signature, SNS resolution, court docket number, or first-party admission to back it.
A Cyprus-registered unlicensed gambling platform. A Solana NFT launchpad. Ten "separate" NFT brands. All wired together at the funding layer, the operator layer, and the product layer. PROOFs A–W below walk through the receipts. This section frames how the money moves.
playflipgg.sol ownershipSQDS4ep65T869z…The older operator wallet Dhe1CVjX… (registered thclabz.sol back in April 2024) was co-signed in its earliest visible tx by FLiPGqow… — a vanity-prefix wallet matching the Flip.gg operational naming convention. This is the FOURTH independent on-chain Flip.gg → operator funding event, across 34 months.
Every box above links to the wallet/program on Orb Markets. Every arrow corresponds to a real on-chain transaction with a signature hash.
launch-my-nft.Flip.gg is not anonymously alleged to be unregulated — that's a documented finding across multiple independent reviewers. Browse the receipts before forming a view.
"Unverified license. Anonymous ownership. Loot-box mechanic raises age/regulatory concerns."
"No transparent owner. Loot boxes function as unregulated gambling under an NFT wrapper."
Even the supportive write-up acknowledges the dusting marketing campaign + unverified ownership structure.
Withdrawal denials, diverted-deposit allegations, lost-balance reports. Platform's response: they "do not have the ability to access or divert anyone's funds."
Mad Lads founder Armani Ferrante publicly criticised the Flip.gg dusting approach for cluttering Solana analytics + accelerating copycat scam-airdrop campaigns.
Measured Flip.gg dusting at 18+ SOL in two weeks. Quantified the "address-poisoning" risk of legitimate-looking dust addresses.
Documents the broader Flip.gg dusting cluster + the address-poisoning attack vector it enables.
Documents wallet FLiPggWYQyKVTULFWMQjAk26JfK5XRCajfyTmD5weaZ7 spamming zero-value transactions across thousands of unrelated addresses — flagged as a potential network-attack vector.
Read multiple of these in sequence. A picture emerges of a Cyprus-registered platform with no public ownership disclosure, no gambling license, documented user-fund complaints, and an industrial-scale on-chain dusting operation that — as PROOFs E + V + W show — also functions as the funding origin for an NFT-brand network with the same product mechanics.
THC Labz is publicly marketed as a Solana NFT brand with cannabis branding. The actual operator behind it controls a Solana wallet that holds 215 different .sol domain names — including the brand names of "separate" projects, Florida-geography identity names, cannabis-themed names, and a five-name Flip.gg branded namespace cluster.
The operator wallet: H6n2bv6pLWUsn3CynLjTchqnLhgp5aHndHRQhdNW6DUg
The wallet's primary identity on SNS is aiflippa.sol — confirmed by visiting any of the brand's domain pages on sns.id. The "Owned by:" line on thclabz.sol, owltopia.sol, floridalife.sol, and flippaflips.sol all read Owned by: aiflippa.sol. The platform itself publicly displays the cross-brand link to anyone who looks.
Why this matters: The operator chose to publicly reverse-resolve to a Flip.gg-themed name. Flip.gg is a Solana-native gambling and casino platform. The same Flip.gg infrastructure that operates the gambling site has a documented on-chain seed-funding link to the launchpad program every "separate" crew NFT brand mints through (see PROOF E below). The operator did not hide the connection — they made it the primary identity.
Wallet H6n2b…W6DUg holds 129 .sol domain names per live SNS account view (2026-05-16). The portfolio breaks down across themes that reveal the operator's full scope of brand-jacking + identity-concealment:
Domains (215) and the primary identity is aiflippa.sol. Each individual domain page (e.g. thclabz.sol) renders Owned by: aiflippa.sol in the header. The platform itself publishes the cross-brand link.
@THC_Labz and @Owltopia_sol present themselves on X as two independent Solana NFT projects with distinct branding, distinct collections, and distinct community channels. On chain they share a single SNS-operator wallet.
The wallet's reverse-resolved primary identity displayed on every individual domain page is aiflippa.sol — itself a Flip.gg-themed handle. The operator has not used distinct wallets for the two brands; they share one custody key controlling 215 names that span both brands plus Florida-identity + Flip.gg + cannabis namespaces.
Implication: any future "drama" or distancing between @THC_Labz and @Owltopia_sol on X is theatre. Operationally they are the same person.
Prior crew investigations (BASC, Aevon, Puffsterz, GOTM) established the "Florida-crew" geography thesis from public signals across the projects' filings, public statements, and follower patterns. This wallet provides on-chain corroboration.
The same wallet that holds thclabz.sol + owltopia.sol also holds four Florida-identity .sol names:
Significance: people don't accidentally collect four "FloridaX" .sol names. This is intentional identity-marking by the operator. It also matches the Florida-crew evidence already published in PUFFSTERZ (Florida smoke-shop LLC), BASC (St. Petersburg follower clusters), and AEVON (Crypto.com Hot 2 funder → Florida operator).
The wallet's reverse-resolved name on SNS — the identity the platform shows publicly on every domain page — is aiflippa.sol.
"flippa" + "ai" is a clear Flip.gg framing. Flip.gg is a Solana-native online gambling and crypto-casino platform. The operator's choice of primary identity is not subtle — they branded themselves on the gambling venue.
Of the 129 .sol names the wallet holds, five are Flip.gg-themed:
The Flip.gg-themed concentration in the portfolio is too high to be coincidental. Combined with PROOF E below — where the same Flip.gg infrastructure on-chain seeded the launchpad program used by every "separate" crew brand — the operator's identity choice reads as an open admission of the relationship.
This is the single most consequential on-chain finding in this investigation. The Flip.gg hot wallet — the same wallet that processes deposits and withdrawals on the gambling site — sent a 1 SOL seed payment in 2022 that, after a 17-month dormancy and one hop, became the upgrade-authority multisig for the launchpad program every crew NFT brand mints through.
Flip.gg is a Solana-native online gambling platform. It specialises in loot boxes, "case opening" wheels, multiplier games, and upgrader mechanics — the casino subgenres that target younger users and skirt traditional gambling licensing. Claimed ~$100M lifetime volume and ~70,000 registered users (per the operator's own marketing).
Regulatory status: the corporate entity is listed as "Flip Games Ltd" with an address at Voukourestiou, 25 Neptune House, Limassol, Cyprus. No public ownership disclosure. No gambling license. No regulatory oversight on record. Independent reviews (ProvenCrypto 2026, CryptoAdventure 2026) note the transparency gap directly.
User complaints: the public Trustpilot review thread includes withdrawal denials, allegations of diverted deposits, and reports of lost balances. The platform's own response is that they "do not have the ability to access or divert anyone's funds."
⚠ THE DUSTING OPERATION — Flip.gg's other on-chain footprint
Flip.gg runs a sustained on-chain dusting campaign through vanity-prefixed wallets (FLiPg..., fLiPg..., the broader flipgg.sol cluster). These wallets send uneconomical micro-transactions (sub-0.000005 SOL — less than gas) to millions of Solana wallets. Pine Analytics measured 18+ SOL spent on dusting in two weeks alone. The point isn't the dust — it's getting "FROM: FLiPgg..." into millions of wallet histories as free advertising.
The dusting wallets and the operational treasury are two different surfaces:
FLiPgGTXt…SYMFF · fLiPgg2yT…7Zc · FLiPggWY…aZ7 = vanity-prefixed dusting wallets (marketing spam)2AQdpHJ2…rPicm = the real operational treasury (~23,000 SOL balance, processes gambling deposits + withdrawals, seeded the launchpad chain in PROOF E above)Side effect on investigators: the dusting clutters counterparty graphs and produces false-positive "operational link" matches — analytics tools Solscan + SonarWatch have added filters to reduce the noise. Whether this obscuring effect was a designed feature or a marketing-tactic byproduct is unconfirmed; the effect itself is documented. All claims in this investigation use the operational treasury (2AQdpHJ2), not the dusting cluster. The PROOF E seed transfer (0.999847 SOL) is real economic value, not dust.
Public criticism: Mad Lads founder Armani Ferrante and others have publicly criticised the dusting approach for cluttering Solana analytics, accelerating copycat scam-airdrop campaigns (per Blockworks).
On-chain spam history: the Solana Labs GitHub issue #34217 documents the wallet FLiPggWYQyKVTULFWMQjAk26JfK5XRCajfyTmD5weaZ7 spamming zero-value transactions across thousands of unrelated addresses — a pattern the original reporter flagged as a potential network-attack vector. Multiple independent security writeups document the broader Flip.gg dusting cluster.
Why this matters for THC Labz: if the launchpad every "separate" crew NFT brand mints through was seed-funded by a Cyprus-registered, unlicensed, complaint-laden gambling platform — and the same crew operator's primary on-chain identity is a Flip.gg-themed name (aiflippa.sol) — the chain of money is no longer "NFT project + retail" but "gambling-economy infrastructure + recycled NFT brands + retail." Different category of risk. Different category of accountability.
Every signature, address, and timestamp below is verifiable on any Solana block explorer.
playflipgg.sol. The Flip.gg treasury is not just labelled — it self-identifies on-chain through the SNS namespace.
From the prior Aevon investigation (PROOF E in that report), the Aevon project has a 28-wallet insider cluster funded by a hub operator. Two of those insider sub-wallets were created 25 seconds apart:
Why this matters for the THC Labz investigation: the Aevon insider sub-wallet that holds 130 Aevon NFTs also holds a Haxz NFT. The two collections are minted by — and held by — the same operator. That's another "separate" brand quietly stacked into the crew's insider portfolio.
The hub operator that pre-staged both insider sub-wallets is HqdjUGJL…2jH9q. Same wallet has authority on Pixel Reapers and Dead Bears Evolution.
Parent-child relationship PROVEN on chain (re-verified 2026-05-16): the Aevon Hub created the Pure Insider wallet directly. The genesis transaction shows the Pure Insider's pre-balance going from 0 lamports to 15,000,000 lamports in a single tx where the Hub is the funder — confirmed via on-chain pre/post balance deltas.
The wallet's primary SNS identity is aiflippa.sol — which we showed in PROOF D resolves the entire 215-domain portfolio. The corresponding X account is @AiFlippa (6,173 followers, created 2022-11-15). His X bio reads, verbatim:
Three things follow directly from the operator's own self-disclosure:
The conflict of interest: a lead ambassador for the Solana Name Service operating a 129-domain portfolio of brand-squat names — including the namespaces of "separate" NFT projects (boredapeclub.sol, stonedapebiz.sol, thestonedape.sol, etc.) — is a structural integrity problem for SNS itself, independent of the rest of this investigation.
Additional personal SNS domain confirmed: namestack.sol resolves to the same operator wallet — H6n2bv6p…W6DUg. The operator publicly described this as a "personal side project" in a recent tweet. On-chain ownership confirms it's the same wallet behind THC Labz, Owltopia, and the 129-domain portfolio.
On 2026-03-31, @AiFlippa publicly posted his full cross-chain identity stack on X. On 2026-05-10, he reconfirmed it ("Told em my wallet is flippa.eth"). Both posts are self-volunteered, no inference required.
The cross-chain wallet stack he claims:
ENS forward resolution confirms the EVM identity:
Why this matters:
PROOF C documented four Florida-identity .sol names in the operator wallet. PROOF I cross-validates that with the operator's own public statements on X.
Location: Southwest Florida (Naples / Fort Myers / Sarasota / Cape Coral corridor), approximately 1-2 hours north of Miami. Self-disclosed in at least five distinct public tweets:
Occupation: Bartender, primarily private events, Southwest Florida. Stated four times across 2024-2026 — describes Web3/crypto as a parallel track, not primary income.
Cross-validation with prior crew investigations: the Florida-crew geographic thesis was established in BASC (St. Petersburg follower clusters), PUFFSTERZ (Florida smoke-shop LLC framing), and AEVON (Crypto.com Hot 2 → Florida operator). The SWFL self-disclosure places @AiFlippa firmly in the same geography — confirming the crew thesis at the operator-personal level, not just the .sol-portfolio level.
Third independent signal — Solana Accelerate Miami 2026: in March 2026 @AiFlippa tweeted (129 likes) that he "got accepted to Solana Accelerate Miami," describing himself as "a Florida native deep in the @Solana ecosystem." Solana Accelerate is an official Solana Foundation event — attendance requires real-name registration. This is the operator's own third self-attestation of Florida residency, in addition to (a) the SWFL self-disclosures above and (b) the four Florida-identity .sol domains in PROOF C. Three independent on-record signals, none contradictory.
This investigation has been disciplined about the distinction between themed identity and operational control. PROOF E showed that the Flip.gg hot wallet seed-funded the wallet chain that controls the PinIt launchpad. PROOF G showed that @AiFlippa publicly identifies as Flip.gg-themed (5 Flip-branded .sol names in his portfolio, primary identity aiflippa.sol). PROOF J asks the harder question: is @AiFlippa one of the Flip.gg program signers?
The on-chain answer: NO.
The Squads V3 multisig labelled "AAR L" (CpHL5A5d…FZEi) is the upgrade authority on BOTH the PinIt program (F9Six…3akf) used to deploy every crew NFT brand AND the BurnFrozen NFT-utility program (ArAA6CZC…YiXv). Its two signers are publicly visible on chain:
H6n2b (@AiFlippa's operator wallet) does NOT appear as a signer on AAR-L. Independent on-chain verification confirms zero interactions between H6n2b and: the Squads program, the PinIt program, the BurnFrozen program, or the Flip.gg hot wallet at 2AQdpHJ2…rPicm.
The honest framing:
The wallet behind @AiFlippa (H6n2b…W6DUg) was created on 2026-05-14 at 01:00:26 UTC. It has eighteen total lifetime transactions. A persona claiming Lead Ambassador for Solana Name Service, a 129-domain SNS portfolio, CMO of GotSOLpay, and Creator of EYEKONSTUDIO would not have a 3-day-old wallet unless this is a fresh migration destination — i.e. the operator moved his assets from an older wallet onto a new one.
That alone would be circumstantial. What makes it operational evidence: two OTHER brand wallets in @AiFlippa's claimed portfolio were created on the same day.
Three brand-aligned wallets, all genesis-dated 2026-05-14, all owning a different brand's .sol identity. One hand orchestrated the move. The same operator who is publicly @AiFlippa is the only person with the access and incentive to migrate the THC Labz + Owltopia + AiFlippa + EYEKONSTUDIO + EYEKON wallets in a single coordinated batch.
Why this matters even if it's a "clean" migration: when a multi-brand operator suddenly burns their historical wallet trail and spins up three fresh ones on the same day, the most common reasons are (a) preparing for a regulator visibility event, (b) operational-security panic after being identified, (c) tax / corporate-restructuring event, or (d) anticipating a public investigation. None of those are exonerating. They all suggest the operator knows the wallet trail matters.
H6n2b's first ever transaction (sig 3TBNmc1y…tMRg, 2026-05-14T01:00:26) shows the wallet was already holding USDC and immediately signed an outbound 35 USDC transfer. The wallet was pre-funded before its first indexed transaction — confirming the migration narrative. The historical operator wallet exists, is older, and remains to be identified via the SNS name-transfer history.
The Florida-crew network shares a recurring contracted artist — @HaizeelH, a Malaysian freelance illustrator. His client portfolio includes three Solana NFT projects that have publicly rugged or gone dormant: @BrohallaNFT, @VendXNFT, and @Candies_NFT. He is publicly credited as the artist of all three by the projects themselves.
The smoking gun — a single tweet that ties @AiFlippa publicly to the entire ring:
What this single tweet does: @AiFlippa publicly endorses VendX + Brohalla + SoDead + THC_Labz + OnlyKings simultaneously, names HaizeelH as the artist, and @THC_Labz confirms in the same thread. Six brands and the operator self-disclosing the network in one conversation, on record, 2026-09-05. Nothing in this paragraph is inference — every word is in the public tweet.
The acquisition (separate, also public): @THC_Labz formally acquired @VendXNFT from treasury, publicly framing it as a "fellow @HaizeelH art community" project. One brand absorbing another openly, with the artist named as the common thread. Two "separate" brands fold into one operator with public confirmation.
brobets.io fits the same pattern at a different stage — the original brand goes dormant, the operational hands move it sideways into the crew's gambling-adjacent infrastructure. Per @dak_daze's own public statement on 2026-04-13 ("This week is about MutantsOnSol. Burning all 222 for new art by HaizeelH."), the MutantsOnSol V3 re-launch is the same pattern in progress now — burn the original supply, ship new HaizeelH art, re-mint into a fresh community under the same crew control.
The lootbox-prize integration: 17 @THC_Labz tweets feature @Candies_NFT NFTs as prize inventory in the THC Machine / Degen Toy Machine lootbox campaigns. The crew's signature MO — gambling under an NFT wrapper — runs directly across "separate" brands using shared prize pools.
Current status of the three "separate" rugged brands:
| Brand | X Status | Website | Discord | Floor | Lifetime Vol |
|---|---|---|---|---|---|
| @BrohallaNFT | Last tweet 148 days ago · 40 rug-calls · ZERO response | brohalla.gg DEAD · pivoted to brobets.io CASINO | 1,380 / 271 online | 0.0298 SOL | 63,965 SOL (~$11M) |
| @VendXNFT | Last tweet 849 days ago · "SOLD OUT" frozen in bio · ZERO response · only 139 lifetime tweets (post-rug deletion signature) | vendxnfts.com DEAD (ECONNREFUSED) | 3,082 members · 0 online | 0.1114 SOL | 1,620 SOL |
| @Candies_NFT | Last tweet 176 days ago · ZERO response | candiesnft.xyz DEAD (ECONNREFUSED) | discord.gg/candies = invite 404 (server deleted) | 0.25 SOL | 5,455 SOL |
@HaizeelH's portfolio site (haizeel.com) selectively distances: his own portfolio lists VendX + BASC + THC Labz + Bozo Collective + OnlyKings but deliberately omits Brohalla + Candies — the two with the most visible rug damage. Strategic distancing.
The catalogued portfolio of @HaizeelH across the Solana NFT space contains 14 projects. Six of those — 43% of the entire portfolio — are operated by wallet-attributed Florida-crew operators. The crew has been hiring the same artist for project after project, across years.
The breakdown per crew operator:
The headline finding: @dak_daze — already wallet-attributed in the prior BASC investigation — runs four simultaneous active HaizeelH-art properties. One of them (OrbisOnSOL) is the crew's own marketplace, not just an NFT project. The same operator is commissioning the same artist across his entire stack and publicly stating it in his own tweets.
Why this matters for the case: the crew's brand-separation theater (different X handles, different deployer wallets, different Discord servers per project) deliberately makes on-chain analysis come up empty when you compare deployer addresses across "separate" brands. The art commission relationships are what we publish to bypass that separation — same human commissioning the same human across multiple confirmed crew properties.
@The_FoxClub is an established Solana NFT brand (account created January 2021, ~4,000 followers, $7M+ lifetime trading volume per Magic Eden). Its public account has self-disclosed an escalating operational relationship with the BASC / Florida-crew stack across four documented tweets spanning 18 months:
What the four tweets together prove:
The pattern at the operational level: the crew has been progressively absorbing The Fox Club's NFT supply into its gambling-prize stack. This is the same rug-and-derug mechanic documented in PROOF L (THC Labz acquiring VendX, Brohalla pivoting to a casino, MutantsOnSol V3 burn-and-relaunch) — except in Fox Club's case, the integration is via shared prize-pool inventory rather than a direct acquisition announcement. The operational result is the same: Fox Club NFTs are now currency inside the crew's gambling economy.
This investigation has built a calibrated picture of @AiFlippa's operational hygiene. The findings are deliberate: the operator is sophisticated enough to maintain wallet isolation between his fraud-adjacent operation (THC Labz / Owltopia / 129-domain crew portfolio, run from H6n2b…W6DUg) and his publicly-claimed day-job roles (SNS Lead Ambassador, GotSOL CMO, EYEKONSTUDIO Creator). Cross-referencing direct on-chain transactions across his identity-attributed wallets returns ZERO direct overlap between the crew operator wallet and his claimed-employment wallets.
What this means in practice:
But pseudonymity is not anonymity — here's the path that exists.
@AiFlippa publicly self-disclosed his EVM wallet on multiple occasions (May 10 2026: "Told em my wallet is flippa.eth" · March 31 2026: full 10-chain identity stack listing flippa.eth). The ENS forward-resolves: flippa.eth → 0x3F50269D1fBaE84F05134dBCA3acF603ECc8dd5f.
That wallet has received 12 separate ETH deposits from Coinbase between March 2024 and November 2025, including a 0.2916 ETH deposit on 2024-03-19. Each deposit is a KYC-verified withdrawal event recorded in Coinbase's regulated US-exchange records.
Additional context — the persona pivot: @AiFlippa's recent (Mar-May 2026) X timeline is dominated by Pokemon TCG / One Piece TCG / sports parlays / claw-machine / collectibles content. The NFT / lootbox / crew-brand content has been deliberately distanced from the public X feed — even though the H6n2b operator wallet remains active. Brand-laundering at the X persona layer; chain unchanged. Notably, his 2026-05-13 tweet "All this @SolanaFndn chatter @solana is really out here not knowing who I am. I'm tired. That's the post." publicly documents that he has not been recognized by official Solana Foundation channels — matching the pattern across this entire investigation: every confirmed crew brand has zero official ecosystem recognition.
Investigation credibility lives or dies on what we leave out as much as what we name. The on-chain evidence rules these projects OUT of crew operational control:
stonedapebiz.sol and thestonedape.sol on SNS (already documented in PROOF A as defensive brand-namespace squatting). The collection itself is NOT crew-operated — it's a well-known independent project that the crew opportunistically squatted the .sol names for.trippingapetribe.sol resolves to 2jKaPJpA…RnRuv — a non-crew wallet.Any project not named on this page or in the founder/brand roster was either (a) cleared by on-chain evidence, (b) lacked sufficient evidence to publish, or (c) hasn't been investigated yet. The absence of a name is not an endorsement — it's an honest "we don't know."
PROOF E established that Flip.gg seed-funded the wallet chain leading to the launchpad controller. PROOF Q now opens the controller itself. The launchpad program F9Six…3akf (LaunchMyNFT / PinIt) has its upgrade authority set to a Squads V4 multisig on Solana mainnet. Decoding the multisig configuration account directly from the chain reveals it is a 2-of-3 multisig — any two of three private keys can upgrade the launchpad bytecode at any moment.
SQDS4ep65T869zMMBKyuUq6aD6EgTu8psMjkvj52pCf
Standard Squads V4. Time-lock = 0 (instant execute). 150 vault transactions already executed.
529-byte Squads V4 multisig account. Contains the 3 member keys + the 2-of-3 threshold + the rent collector pointer.
The vault PDA derived from the multisig. This is the named "upgrade authority" of the launchpad program. It signs only when 2 of 3 members approve.
The PinIt program every Florida-crew NFT brand mints through. Upgrade authority = the vault PDA above. Whoever controls 2 of 3 keys can re-upgrade this binary at any moment.
MNzFR9oga3xiRdz4Wu1geZvxaMAz94J8ScyXpSsKbtZ
Direct downstream of Flip.gg seed chain (PROOF E). Fee-payer of the most recent PinIt program upgrade (2026-05-15) — the executing signer. Holds 0.017 SOL as an EOA.
4UjqFD1JUjbnwnjuPnaXoz6tSwNtFLVXzF9hk2Kp3aZw
Genesis 2024-01-17. EOA holding 0.005 SOL. Now dormant since 2025-11-19 — the multisig has continued executing without this key, consistent with the 2-of-3 threshold structure that allows operations even if one member is offline.
BJ9SfmEBvc31N8v8URqxPeRVdx3U8YkHcvoWTm6qEZTz
Genesis 2024-01-17 — created the same day as Member 2, consistent with both being spawned at multisig setup. EOA holding 0.049 SOL. Active as recently as 2026-05-15. Operationally exclusive — interacts almost exclusively with Squads infrastructure accounts.
For the first time, the controllers of LaunchMyNFT's actual upgrade authority are public. Three keys, with a 2-of-3 threshold, seeded by Flip.gg in 2022 (PROOF E), and used to ship every Florida-crew NFT collection investigated in this report. The legal-attribution question now narrows to identifying the natural persons behind those three addresses. The on-chain decode itself is reproducible — open the multisig config account above and read bytes 128 onward.
PROOF E documented the 2022-08-09 seed transfer from Flip.gg Hot 1 to the relay wallet that became Member 1. A direct genesis-tx fetch now confirms both original multisig members were funded by Flip.gg's relay wallet on the same evening, 14 minutes apart, in identically-structured 0.1 SOL transactions. This is the operational fingerprint of one person setting up a 2-of-2 multisig in a single session, not coincidence and not shared infrastructure.
4qYktnw… (Flip.gg Relay)MNzFR9oga… (Member 1)4qYktnw… (SAME Flip.gg Relay)4UjqFD1J… (Member 2)config_transaction_executeBJ9SfmEBvc…Each PinIt program upgrade is executed in two paired phases on-chain:
MNzFR9oga…) initiates a Squads V4 vault-transaction-execute. The multisig releases ~10.63 SOL from the vault to the upgrade buffer write-account LRVra68WSA… (an EOA holding 12.7 SOL, currently funding ongoing upgrades).Recent verified upgrade cycles: 2026-04-07, 2026-04-24, 2026-05-12, 2026-05-15 (most recent). Each upgrade cycle is large enough to require thousands of chunked writes, which is why the buffer account's tx count looks artificial — it's the chunked-write artifact of frequent program upgrades, not a separate operator. The actual signing authority lives in the 2-of-3 multisig above.
PROOF I documented the operator's first three Florida self-disclosures. PROOF R closes the geography question with a sweep of @AiFlippa's publicly visible X timeline — posting-time distribution + verbatim location signals. The pattern is unambiguous: EST/EDT operator, dominant 10am–2pm Florida-time posting window, dead zone in pre-dawn Florida hours (03:00–05:00 EST).
"Manifested this one heavy. Just got accepted to Solana Accelerate Miami. As a Florida native deep in the @Solana ecosystem, this one hits different. Miami gonna be loud."
"My family runs a data & analytics company. A Florida based B2B data powerhouse. That's been operating for 20+ years. Machine learning, direct marketing. Fortune 1000 clients down to solo operators."
"There's a specific type of person florida produces. Resilient, weird, unbothered, capable of anything. I am that person. We will prevail."
"Day 1 of @consensus2026 Miami." — physical-attendance confirmation, ticketed real-name event
"Stablecoins are the unlock... Miami is just a warmup."
"Had the pleasure to meet @SquiddyNFT in Miami. What a vibe. Told em my wallet is flippa.eth. Didn't expect anything. My mans blessed me with a @TheFisters."
This is the operator's first publicly-disclosed in-person physical meeting with another crew member post-NFT-pivot. @SquiddyNFT was already documented as a Florida-crew member. The "wallet is flippa.eth" disclosure also opens a cross-chain forensic path — see PROOF S below.
"Florida dood"
9 additional tweets in the same window contain Miami-explicit or Florida-explicit signals (Miami nightlife venues, @hardrockbet — Florida's Seminole Hard Rock Bet — mentioned 3 times, "GM" posts at UTC 13:00–16:00 = EST 08:00–11:00 morning wake-up).
The combination of (a) 14+ verbatim Florida/Miami self-disclosures, (b) a timeline-wide histogram with peak EST 10am–2pm and zero pre-dawn EST activity, (c) physical attendance at two Miami events (Solana Accelerate Miami, Consensus 2026 Miami), (d) self-disclosed in-person meeting with another crew member in Miami, and (e) repeated mention of a Florida-specific gambling brand (@hardrockbet) — establishes the operator's physical Florida location beyond reasonable doubt. The family-business disclosure ("Florida based B2B data powerhouse, 20+ years, machine learning, direct marketing, Fortune 1000 clients") is independently searchable in the Florida Secretary of State business registry.
PROOF P documented the operational wallet isolation between the operator's 215-wallet Solana portfolio and his day-job wallets (the GotSOLpay treasury, EYEKONSTUDIO, Remedy personal). PROOF S documents the one bridge the operator built himself: the public cross-chain identity tying his Solana persona to an Ethereum wallet via ENS.
"Proud to officially be the owner of flippa.eth. I've been chasing this one for a long time, @ensdomains. Noticed it expired, while navigating @StableIDS. Didn't hesitate for a second."
"Had the pleasure to meet @SquiddyNFT in Miami. What a vibe. Told em my wallet is flippa.eth."
ENS forward-resolution from flippa.eth returns a single Ethereum address. That address has a public deposit history on Ethereum mainnet. Multiple deposits from a regulated US exchange (Coinbase) to that address are visible on-chain. The deposit address on the Coinbase side is KYC-attributed at the exchange — a single regulatory request to Coinbase tying the deposit address to the customer record unmasks the natural person behind the wallet.
The operator made this path possible by publicly disclosing flippa.eth as his cross-chain identity. He did not have to. This is the kind of disclosure an operator makes when he believes the rest of his on-chain footprint is sufficiently siloed from his real identity that the ENS pointer is "safe." It isn't — when ENS resolution and Coinbase KYC are in the same diagram, the path closes.
Investigation discipline: we do not publish the resolved Ethereum address or any specific deposit transactions on this page. The investigation publishes the path (ENS pointer is public + the wallet is self-disclosed) but does not do the unmasking ourselves. That is a step for the appropriate regulatory party — if and when they care to take it. The path being walkable is the publishable finding.
Flip.gg is a Solana-native online casino. Its core products are slot machines, crash games, coin flips, scratch cards, and mystery boxes. PROOF T documents that every NFT brand investigated in this report ships the same mechanics inside their NFT product — requiring the brand's own SPL token to spin. The brands are not "NFT projects with side games." The games are the product. The NFT is the wrapper that puts the gambling on-chain and outside conventional licensing.
| Brand | Lootbox / mystery box | Wheel / spinner | Scratcher | Buy 1 → win 1 | Token-gated |
|---|---|---|---|---|---|
| GOTM Labz | ✓ | ✓ | ✓ | ✓ | ✓ ($GOTM) |
| BASC | ✓ | ✓ | — | ✓ | ✓ ($BASC) |
| Aevon | ✓ | ✓ | — | ✓ | ✓ ($AEVON) |
| THC Labz | ✓ | ✓ | ✓ | ✓ | ✓ ($THC) |
| Pandarianz | ✓ | ✓ | — | ✓ | ✓ ($PNDA) |
| Loud Lords | ✓ | ✓ | — | ✓ | ✓ |
| Devils on Sol | ✓ | ✓ | — | ✓ | ✓ |
| Frens Factory | ✓ | ✓ | — | ✓ | ✓ |
| Mutants on Sol | ✓ | ✓ | — | ✓ | ✓ |
| Puffsterz | ✓ | ✓ | ✓ | ✓ | ✓ ($PUFF) |
The product is the same. The wrapper differs. Flip.gg ships gambling as a licensed-ish casino. The crew brands ship the same gambling inside an NFT product and require the brand's own SPL token to spin, which (a) creates closed-loop demand for an otherwise valueless token, (b) extracts repeat spend from a captive holder base, and (c) avoids the disclosure requirements a licensed gambling product would face. The fact that the launchpad these brands all use was seeded by Flip.gg (PROOF E) and is controlled by a 3-key multisig that we have now opened (PROOF Q) is the explanation for why the product designs are this consistent.
Calibrated framing: shared playbook does not prove shared ownership of every brand. Crew operators are individually wallet-attributed where we have on-chain proof (see the "Founders, Brands, Amplifiers" section below). What PROOF T documents is product-design convergence and the operational venue stack (PinIt for minting, Flip.gg for cash-out, shift3.app / orbisonsol.io for floor maintenance) that this network shares. Whether the same natural person operates Flip.gg AND the crew brands is the next unmasking step — the path runs through PROOF Q's three multisig keys and PROOF S's flippa.eth ENS pointer.
PROOF R established that @AiFlippa never directly promotes Flip.gg in recent activity — strict ambassador-style operational silence. PROOF W documents the deeper historical record. His full publicly available X history surfaces seven direct reply interactions with the official @Flipgg_ account, plus 32 gambling-adjacent tweets. The pattern is precisely "casual gambler banter," not affiliate promotion — which is what an insider / employee can publish without triggering FTC sponsored-content disclosure rules.
"@Flipgg_ Flip for flippa. Sounds right."
An explicit public self-identification — the operator's "Flippa" persona literally being mapped onto the Flip.gg brand, in a direct reply to the platform's own account. The phrasing "sounds right" reads as confirmation of an alignment the operator and Flip.gg both already understand. No affiliate disclaimer, no #ad tag, no referral code — but the brand-identity merger is publicly on the record.
"What a wild night to be a degen... Shoutout to @GalacticGeckoSG & @SolanaK9S @Flipgg_ [media]"
Most engaged: 18 likes, 6 RTs. Media attachment likely a Flip.gg gameplay screenshot.
"@Flipgg_ 420"
Cannabis reference — consistent with the operator's THC Labz brand.
Dhe1CVjX… registers thclabz.sol (PROOF V).H6n2bv6p created via AllDomains TLD claim (PROOF V).A random Flip.gg fan would either (a) tweet about wins/losses regularly with screenshots and referral codes (classic affiliate behaviour) or (b) not interact with the platform's account at all. The actual pattern — infrequent, casual, brand-name-merging replies that never include affiliate links or sponsored disclaimers — is what an insider or employee can publish without legal exposure.
The 2022-08-09 Flip.gg → multisig seed funding PREDATES the @AiFlippa X account creation by three months — meaning the on-chain Flip.gg relationship existed BEFORE the public persona was launched. Combined with the @Flipgg_ "Flip for flippa. Sounds right" reply, the operator's own X timeline corroborates the on-chain finding that Flip.gg infrastructure is the founding layer of this operation.
Calibrated framing: we still do not claim the operator is Flip.gg's CEO or beneficial owner — that's a corporate-records question (Flip Games Ltd, Cyprus) the chain can't answer. What is publishable: a documented multi-event funding relationship spanning 34 months + public self-identification of brand alignment + operational silence (no affiliate disclosure) consistent with an insider role. The next reasonable read is corporate-records — see PROOF S for the KYC unmask path.
@AiFlippa's X bio opens with "Lead amb @sns" — the Solana Name Service. The SNS protocol is a legitimate Solana-ecosystem project. PROOF X documents who actually runs SNS, why that matters for the calibration of this investigation, and why the operator's leveraging of the title is itself a finding worth publishing.
SNS leadership is NOT implicated in this investigation. The SNS protocol is a credible Solana naming-service infrastructure project with experienced regulatory-background leadership.
The finding: the operator is using SNS's legitimate brand as a credibility shield while running an unrelated fraud network. The protocol is collateral damage of the operator's positioning, not a co-conspirator.
A "Lead Ambassador" badge from a credible Solana-ecosystem project sits at the top of the operator's bio. Anyone evaluating his trustworthiness reads that title and absorbs the implication that SNS itself has vetted him. SNS has no documented mechanism for vetting ambassadors against fraud-network involvement, and there's no public indication SNS leadership is aware of the on-chain pattern documented in PROOFs A through W.
The publishable point isn't "SNS is corrupt." The publishable point is: when the operator's identity is unmasked, the SNS Foundation will likely want to review its ambassador-vetting process. This investigation provides the on-chain evidence to support that review. SNS leadership: contact @cryptoflan if you'd like the full investigation package.
PROOF V established that aiflippa's current portfolio wallet H6n2bv6p is only 8 months old and that the OLDER operator wallet Dhe1CVjX originally registered thclabz.sol back in April 2024. The wallet-consolidation thesis (both wallets controlled by the same operator) was the most reasonable read of the brand-domain transfer history — but a critical direct edge was missing. PROOF BB documents that direct edge, found on 2026-05-16 in a 10-minute USDC-relay operation where the two wallets coordinated 28 seconds apart.
H6n2bv6p (aiflippa.sol) pays the fee to create a fresh relay wallet B8DMRxfYGJ53bsiiQ6GMJ9xfhK8fMAj6D89Jx38B1xuk.
Dhe1CVjX (older operator wallet) sends USDC into the ATA of the freshly-created relay wallet B8DMRxfY.
Dhe1CVjX sends 0.030 SOL through unidentified Flip.gg-pattern program DF1ow4tspfHX9JwWJsAb9epbkA8hmpSEAtxXy1V27QBH to a freshly-created sink wallet CdeigPna… (first sig same day). Classic Flip.gg-as-mixer pattern.
B8DMRxfY completes 9 transactions in the 10-minute window, ending at zero balance. The final USDC exit destination would unmask the operator's payout endpoint.
The two wallets are operated by the same person. No coincidence creates a 28-second-apart, real-time relay-and-fund operation between two "unrelated" wallets. The wallet-consolidation thesis from PROOF V is now directly confirmed: H6n2bv6p (current portfolio) and Dhe1CVjX (older operator who registered thclabz.sol) are the same operator's two wallets. The "operational silo between identity wallet and infrastructure wallet" from PROOF P breaks down at the USDC-coordination layer.
A hypothesis raised earlier in this investigation: the Flip.gg dust campaign is not pure marketing — it is also operationally used to pre-stage operator infrastructure wallets while disguising the funding as spam. The trace of FLiPGqow's activity history confirms it.
On 2025-06-10 at 22:21:09 UTC, the FLiPGqow vanity-prefix wallet broadcast a 17-instruction System Program batch transfer in a single transaction, funding 16 sibling wallets simultaneously with 1 lamport each. Dhe1CVjX was one of those 16. The pattern characteristics:
Two interpretations of the same pattern coexist: Flip.gg's public-facing position is that dusting is marketing. The on-chain reality is that the same dust mechanism is ALSO used to pre-stage 16-sibling-wallet operator infrastructure batches with funding amounts deliberately below economic-evidence thresholds. The dust IS the funding. The 1-lamport initialization gives the wallet existence on-chain so it can later receive larger amounts without triggering "freshly-funded wallet" red flags.
15 wallets received the same 1-lamport initialization in the same tx as Dhe1CVjX. Three of them remain operationally active today:
| Sibling wallet | Current balance | Operational status |
|---|---|---|
| BfzPRP73…BX3j | 2.93 SOL | ACTIVE today (2026-05-17). Uses proVF4pM Flip.gg-pattern program. Likely separate operator wallet. |
| DeLAuGTv…M6eW | 0.25 SOL | Active. Jupiter swaps in March 2026. |
| 6sAFaCPk…wqPJ | 0.40 SOL | Active. |
| 12 other sibling wallets are dust-drained or below 0.02 SOL today. | ||
The trace surfaced two unknown BPF-upgradeable programs used by Dhe1CVjX + sibling wallets in payout flows. Both have small-balance upgrade-authority wallets (1-2 SOL) — consistent with proprietary Flip.gg payout/escrow infrastructure rather than known public DEX/staking programs:
9uo2iJKJkmiYwy5MrkrbGQXbPqwHXqvQaUqxhCkowgsh (holds 1.01 SOL, active 2026-05-14).CjoV5B96reuCfPh2rRK11G1QptG97jZdyZArTn3EN1Mj (holds 1.90 SOL).These are operator-deployed Solana programs that the crew + Flip.gg-staged wallets use to route disbursements. Identifying the natural persons behind the upgrade-authority addresses (9uo2iJKJ… and CjoV5B96…) is the next-step trace.
PROOF S documented the cross-chain identity self-disclosure (flippa.eth → Coinbase KYC path). PROOF AA is the full identity surface, mapped across seven independent public services with cross-confirmation between sources. The operator's real legal name is the only piece of the identity that hasn't surfaced from public-record sources — and PROOF AA documents at least four independent KYC paths that would resolve it.
aiflippanft@gmail.com
Cross-confirmed by two public sources, 7 days apart:
com.email on flippa.eth, registered 2026-02-27. Publicly readable at worker.ens.xyz/n/flippa.eth8f8dd7d in repo aiflippaa/Flippa.lol, dated 2026-02-20Same week as the ENS registration — operator established the "flippa" cross-platform brand in a single build sprint. The email was the seed identity.
com.twitter: AiFlippaemail: aiflippanft@gmail.comname: Flippadescription: SNSurl: https://SNS.idENS reverse-record was also set (via call to ENS ReverseRegistrar contract 0x0000000000001ff3684f28c67538d4d072c22734) on 2026-02-27 — confirming flippa.eth is the operator's primary cross-chain handle, not merely a forward-resolved name.
github.com/aiflippaa
Display name: "Flippa" · created 2025-10-17 · one public repo (Flippa.lol parody site) · follows GotSOL-US-VI org and SolanaNameService. Commit author email = aiflippanft@gmail.com.
Note: double-a spelling (aiflippaa) — the single-a AiFlippa handle on GitHub is a placeholder by an unrelated user. The double-a is the operator.
FID 1087576
Username: aiflippa · Display: "AiFlippa.sol" · Bio: "@snsdotsol Ambassador" · Warpcast-signed connection to X handle @AiFlippa — strongest cross-platform identity proof available. 3 casts total, nearly dormant on Farcaster.
Two interactions with 0x68731d6f14b827bbcffbebb62b19daa18de1d79c on Arbitrum (2026-03-05 + 2026-05-15) — this address is IdOS, an on-chain KYC / identity-credential protocol.
What this means: the operator has submitted a formal identity credential to an on-chain KYC system. The credential data is encrypted but accessible to any organization granted access by the operator — typically including government-ID-backed identity claims. Any regulator, court, or qualified party can retrieve the legal name behind this credential via standard data-access request.
The operator's Solana NFT portfolio includes Solana Saga Phone Pass #001402 — a physical device whose purchase is identity-verified with Solana Mobile.
What this means: Solana Mobile has the operator's real name, shipping address, and payment method on file. Subpoena to Solana Mobile = unmasked operator. This is a US-jurisdiction service, simpler regulatory path than the Cyprus + Netherlands corporate-records chain.
gotsol-biz@protonmail.com
Public contact email on the GotSOL-US-VI GitHub organization the operator is publicly CMO of. ProtonMail (privacy-forward) but documented as the business contact for the org. US Virgin Islands jurisdiction noted in the org name.
0x3F50269D…
Same address active on: Ethereum mainnet (82 txs), Base (last tx 2026-05-08), Arbitrum (last tx 2026-05-15). Bridges used: LI.FI, Relay.link, MetaBridge, Mayan Finance, ApeOFTAdapter. No Tornado Cash / OFAC-mixer interactions across all chains reviewed.
The operator's real legal name is not publicly disclosed on any of the platforms surveyed. However, four independent regulated/identity-verified services currently hold his identity:
flippa.eth visible on Ethereum mainnet (PROOF S). Single subpoena to Coinbase US returns the customer record behind the depositing address.Investigation discipline: this investigation does NOT walk any of these unmask paths. We document that the paths exist and are walkable by appropriate authorities. The on-chain operational evidence — funding chain, MO, brand operation — is sufficient to support whatever the next step is. The unmask is a regulator's job, not ours.
If the operator wishes to address the on-chain pattern documented in PROOFs A–AA, the email he published on-chain himself is aiflippanft@gmail.com. Public X handle: @AiFlippa. Public Farcaster: FID 1087576.
The prior STEAMX investigation documented the Toronto-area Steam Exchange inner circle. PROOF Z documents one cross-network signal that ties that inner circle to the Florida-crew operation visible in PROOFs A through BB: the public amplification activity of Steam Exchange co-founder Pete (@OnlyPetes).
"Daddy Life, Web3, NFTs and Positive Vibes. Co-Founder Of @Steam_Exchange & @B_O_T_NFT. NFA as always DYOR and STAY SAFE." Location: Canada. Blue-Verified. 5,825 total tweets, 1,045 followers. The Steam Exchange co-founder role is publicly active on his current bio.
Pete's promotion is selective — he amplifies a subset of Florida-crew brands (Fox Club, Puffsterz, the 5-handle chain tag) but does NOT publicly promote the @AiFlippa-attributed core brands. The relationship reads as cross-promotional networking, not corporate continuity. The on-chain operator-attribution graph for the Florida-crew operation (PROOFs A–BB) does not extend to the Toronto inner circle on the public evidence reviewed.
This investigation does not stand alone. From January 2022 onward, both Flip.gg and LaunchMyNFT have accumulated a substantial public record of critical coverage — false-investor claims, regulator-flagged spam, scam-detection-site ratings, on-chain dusting analysis, Bitcointalk + Trustpilot complaints, the platforms' own admissions, and a Cyprus shell-company registration filed 16 months after Flip.gg's product launch. PROOF CC pulls all of it into one chronological reading.
Flip.gg launches the Solana crypto casino. No legal entity registered anywhere at this point.
Forum user `Stakefast` opens thread "Flip.gg deleting deposit Referrals" — alleges Flip.gg deleted a referral after a $5,000 deposit so no commission was paid. Verbatim: "Do not advertise for Flip.gg, they will simply delete your good referrals." No Flip.gg response in-thread.
User `fr-zec` files an issue against play_flipgg.sol wallet FLiPggWYQyKVTULFWMQjAk26JfK5XRCajfyTmD5weaZ7 — "is it trying to hack solana network?" — citing zero-value spam transactions flooding user wallets. Repo archived read-only 2025-01-22. No Flip.gg response on the thread.
FLIP GAMES LTD incorporated in Cyprus, registry HE 456899. Sole director Charalampos Lafazanis (also directs Kuiper Triangle Cyprus Ltd · Gambitron Ltd · GG Coaching Ltd · Maisonovia Ltd · Chicken Club Entertainment Ltd — Cyprus nominee-director profile). Company secretary: PanLegal Secretarial Services Limited. Address: Voukourestiou 25, Neptune House, Flat/Office 11 Zakaki, Limassol. Online casinos are prohibited under Cyprus law. Flip.gg's operating entity is a retro-stood-up shell in a jurisdiction that doesn't license its product.
Flip.gg's own X account posts: "Tag a friend who received a $FLIPGG airdrop and burned their tokens 🧨 190k holders, but they may still think its a scam" — public self-admission that 190,000 of their own airdrop recipients perceived the token as a scam.
Rahul on Medium names FLiPg vanity wallets (FLiPgGTXt…, FLiPGqow…) as Flip.gg promoter wallets. Cites SNS domains casino🍀flip.gg, casino🎰flip.gg. Notes "they are spamming the network to an another scale" — visualization wallet struggling to load due to tx volume. Wallets tied to 9 scam tokens + 21 domains running coordinated promotion.
Pine Analytics quantifies: across 40 active dusting wallets hitting ~6.2M unique Solana addresses in a 14-day window, accounts tied to casino flip.gg accounted for 74% of all Solana dusting transactions. The platform spent 18+ SOL dusting in two weeks, "far exceeding the value transferred." Corroborated by Wild Tales (Paragraph) follow-up 2025-04-30.
Solscan — the canonical Solana block explorer — has applied platform-side moderation labels to the FLiPg vanity wallets, marking them as "Spam Dusting". This is the strongest possible PROVEN-by-third-party tag available on Solana.
Cova (Medium) re-aires Armani Ferrante's (Mad Lads / Backpack founder) public criticism that Flip.gg's on-chain airdrop strategy "clutters blockchain analytics tools like Solscan and SonarWatch." Backpack subsequently shipped a cNFT spam filter targeting blue-chip holders — Flip.gg-style spam being the dominant case study.
ProvenCrypto 2026 review: "Caution" verdict. "No publicly verified gambling license or regulatory oversight"; "the name of the company registered with its documentation is called Flip Games Ltd, and that is all, there is no licensing information." CryptoAdventure 2026: frames Flip.gg as "loot-box gambling under an NFT wrapper" with no standard responsible-gambling features. ScamMinder: trust score 10/100. Scam-Detector: ~4.7/100, "stay away."
Initial LaunchMyNFT press release listed Binance Labs and Animoca Brands as investors. Dutch trade press (adformatie.nl) published the announcement. 3 days later, a correction was issued explicitly stating "Binance Labs en Animoca Brands géén investeerders zijn" ("are not investors") and that the names were included by mistake. Kwebbelkop attributed it to "miscommunication" — said negotiations with Binance Labs / Animoca were ongoing and the names were "shared too early."
Trustpilot reviewer "Justin" 1-star: "Do Not Participate in these NFT launches… many of them listed are duplicate projects with no real intention of building a community or actually getting listed on a secondary market website… Stick to other Launchpad sites for NFTs."
adformatie.nl follow-up: management acknowledges fans criticised crypto promotion to underage audiences; catalogues post-launch issues including "Nepcollecties" (counterfeit collections); the launch announcement video was subsequently set to private and labelled "outdated" by management.
LaunchMyNFT publicly tags certain hosted collections with its own "SCAM" badge — i.e. the platform's own URL surface documents that scam collections have been launched on it. The most defensible, primary-source evidence of rug-pull launches conducted via the platform.
ArdesiholD (Marco Ardesi) Medium piece: "it is highly likely to encounter accounts that create collections with low quality, copied illustrations… If you buy the wrong NFT's, no one will refund you… The only one who can refund you is the Creator." Specific example: collection ultimately marked "SCAMMER collection" by LaunchMyNFT itself — project website disappeared, Twitter deleted, creators unreachable.
BitPinas reporting links the $HEDGE rug-pull (BitMaestro) to a specific Vault NFT (#7641) minted via LaunchMyNFT — documented secondary-source tie between a documented rug and platform tooling.
Bitdefender community-forum thread notes a gateway.pinit.io pop-up appearing on launchmynft.io — confirming the operational continuity of the LaunchMyNFT front-end being migrated under the PinIt brand. The Solana program upgrade authority for the launcher (CpHL5A5d…FZEi) is the PinIt program — same operational team across both names.
ScamAdviser: 0/100 trust score, "Caution Recommended", "launchmynft.io may be a scam." Red flags listed: WHOIS-hidden ownership, cryptocurrency services high-risk, reviews polarized very positive or very negative.
Per launchmynft.io/terms-of-use: the platform disclaims all liability for loss of profit, loss of business, business interruption, or loss of business opportunity. Does not guarantee rights in crypto assets; delegates responsibility to creators. Buyers are responsible for all tax / similar contributions. No platform-level refund mechanism.
Flip.gg: a Solana crypto casino operating from a Cyprus shell incorporated 16 months after product launch, in a jurisdiction where its product is prohibited, with no public gambling licence and no public shareholder disclosure. The single largest source of vanity-domain dusting on Solana (74% market share in observation windows). Its $FLIPGG token airdrop was sufficiently scam-perceived that the platform's own X account jokes about that perception. User complaints cluster around referral-commission deletion, withdrawal delays, and funnel-redirect fund loss.
LaunchMyNFT (PinIt): shipped January 2022 with a press release that misrepresented Binance Labs and Animoca Brands as investors — falsification corrected within 3 days. No published legal-entity name, WHOIS-hidden ownership, no refund mechanism, liability waiver pushes 100% of buyer risk back to the buyer. The platform's own URL surface attaches "SCAM" badges to flagged hosted collections, and the platform is publicly linked to the $HEDGE rug-pull (BitMaestro Vault NFT #7641). The front-end is being migrated under the PinIt brand whose Solana program upgrade authority traces back via PROOF E's 2022-08 seed-funding chain to the Flip.gg hot wallet — same operational team across both names.
A full litigation + enforcement sweep across CourtListener, PACER, SEC EDGAR, CFTC, DOJ press releases, FTC, FinCEN, FCA warning list, CySEC, Curaçao + Malta gambling regulators, UK Companies House, and Florida Sunbiz found zero civil or criminal filings directly naming any individual or corporate entity documented in this investigation. That is itself a finding: the network has operated for 34+ months without triggering an enforcement docket. The precedent cases below show exactly what the eventual enforcement looks like.
UK Companies House public registry returns NO REGISTRATION for "GOTM Labz Ltd" — despite the brand using the "Ltd" suffix across its public platforms (gotmlabz.io homepage, X bio, marketing materials).
Falsely representing an unregistered entity as a registered limited company is itself a UK consumer-protection issue under the Companies Act 2006 + Business Names Act. The use of "Ltd" without registration is a misrepresentation distinct from any underlying fraud.
United States v. Gabriel Hay & Gavin Mayo · C.D. Cal. 2:24-cr-00756 · grand-jury indictment June 2024 · charges: wire fraud counts 1–6 for NFT rug-pull scheme.
This is DOJ's operative criminal prosecution model for the exact pattern documented in this investigation — recycled NFT brands + rug-pull + wire fraud. The Florida crew has not yet been indicted under this model. The model exists and is active.
Aguilar v. Baton Corporation Ltd. d/b/a Pump.Fun · S.D.N.Y. 1:25-cv-00880 · filed Jan 2025 · second amended complaint Jan 2026 · charges: securities fraud (15 U.S.C. § 77), unregistered securities, operating an unlicensed gambling enterprise.
This is the closest analogue to the Florida crew's MO yet litigated. The complaint specifically alleges that pump.fun's lootbox / coin-flip / "case opening" mechanics constitute illegal gambling under U.S. securities + gambling law. The Florida crew runs the same product mechanics across 10+ NFT brands. If the Pump.Fun theory holds, every crew brand operating these mechanics is a candidate defendant.
United States v. Devin Alan Rhoden & Berman Jerry Nowlin Jr. · M.D. Fla. (Tampa) 8:24-cr-00051 · filed Feb 2024 · charges: 18 U.S.C. § 371 conspiracy to commit wire fraud + money laundering · incident: Pinellas County FL ~April 2022. Aliases: Deviinz, Repulse, Zayous.
Pinellas County FL is in the geographic operating area documented for the Florida crew. The defendants used online aliases consistent with the gaming/NFT space. The publicly accessible docket snippets do not confirm the underlying scheme details — full indictment text would either confirm or exclude a connection to the network documented here. This is flagged as a follow-up requiring direct PACER access.
No public gambling license found for Flip Games Ltd in any of: UK Gambling Commission, FCA warning list, CySEC, Curaçao eGaming, Malta Gaming Authority, US state-level gambling regulators.
Flip.gg operates as an online casino offering slots / crash / coin-flips / lootboxes / scratch cards to US-accessible users (and the rest of the world) without any visible regulatory approval. The operating-without-a-license question is separate from the network-fraud question, but materially adds to the regulatory-exposure footprint.
UK Companies House lists FLIPPA LTD · Company No. 16259023 · incorporated Feb 2025 · registered office Bracknell.
Florida Sunbiz search for "FLIPPA" returns the unrelated Australian marketplace corporation (principals Mark Harbottle + Grant Robson, Victoria, Australia — confirmed unrelated to this investigation).
Both entries are flagged as UNRELATED unless a director-name match surfaces. The operator's real surname is currently unknown; a targeted Sunbiz principal-name search would close the family-data-company finding from PROOF R.
Direct registry-level searches conducted across Florida Sunbiz, UK Companies House, SEC EDGAR, and domain WHOIS:
| Brand | Legal entity found? | Domain status |
|---|---|---|
| EYEKONSTUDIO | NO entity in FL Sunbiz. EYEKON MEDIA LLC (Hollywood, dissolved 2023) + EYEKON INK LLC (Miami, dissolved 2025) are unrelated separate operators. | eyekonstudio.com / .io / .net / .design all unregistered (DNS resolution fails) |
| GotSOLpay | NO entity in FL Sunbiz under "GotSOL" / "GotSOLpay" / "Got SOL". NO Terms/Privacy/About pages on gotsolpay.com (all 404). | gotsolpay.com registered recently via Tucows (privacy-shielded California individual) |
| THC Labz | NO Florida LLC under "THC LABZ" / "THCLABZ" / "THC LAB". NO SEC filings. Operates as unincorporated on-chain identity. | brand X account only |
| Owltopia | NO Florida LLC. NO SEC filings. Same operator wallet as THC Labz. | brand X account only |
| LaunchMyNFT / PinIt | NO legal entity name disclosed anywhere on launchmynft.io. Terms reference "Netherlands" only — no KvK number, no company name, no director. | launchmynft.io WHOIS-shielded |
| Flip Games Ltd | Confirmed Cyprus entity (address published on the platform itself). HE registration number not visible without manual Cyprus Registrar lookup. Beneficial owners require paid Cyprus filing access. | flip.gg .gg TLD (Guernsey Registry, no public RDAP) |
Five of six brands operating in this network have no traceable legal entity at all. The brand identities exist as X accounts + Solana wallets + product mechanics, but no corporate registration exists in any of the jurisdictions where the operator publicly resides (Florida) or where the public-facing personalities are reported (Netherlands for LaunchMyNFT, Cyprus for Flip.gg). This is not a one-brand oversight — it is the operating pattern.
The active SDNY Pump.Fun case (Aguilar v. Baton) is the most consequential ongoing matter. If the plaintiffs win on the "lootbox = unlicensed gambling" theory, the Florida crew's product mechanics put each brand into the same legal-theory bucket. The combination of (a) PROOF E + PROOF Q + PROOF V's funding chain from Flip.gg into the launchpad operator, (b) PROOF T's MO matrix, (c) the lack of any gambling license, and (d) the GOTM Labz Ltd false-Ltd-claim adds a UK consumer-protection angle on top of US securities + gambling exposure.
Calibrated framing: we are not predicting an enforcement action. We are documenting that the on-chain pattern + product mechanics + corporate-disclosure failures match the elements being litigated in two active US federal cases (Hay/Mayo + Pump.Fun). Anyone evaluating regulatory exposure for this network — or for SNS's ambassador program — has the documentation here.
| Project | Operator | On-chain proof |
|---|---|---|
| @THC_Labz + @Owltopia_sol | @AiFlippa | aiflippa.sol wallet = 129 .sol portfolio (PROOFS A+B+D) |
| @GotmLabz (launchpad) | @moon_blaze_ (Rico) | Named operator per BASC investigation |
| @GAINZNFTs | @JustinGainz | gainz.sol → wallet matches prior Coinbase deposit trace |
| @AevonNFT | @jorgieboy + @Saxiaaanft | jorgieboy.sol = Aevon MEXC-listing wallet |
| @BoredApeSolClub + @BASC_SuitsDAO | @dak_daze + @SWISS_SOL | dak_daze.sol + swiss.sol wallets (full BASC trace at /investigations/basc) |
| @LoudLordsNFT | @TonenUp | Verified alt-pair |
| @ThePandarianz | @DJSOL98 | Verified alt-pair |
| @Omerta_SOL + @RilegatoDAO | @Digitoss_sol | Omerta Don — Rilegato sub-DAO control |
| @Frens_Factory | @XGinsu | XGinsu cross-promo links Frens to crew; Batunos artist tie |
| @SolanaK9S | @degenbrody | degenbrody bio: "Founder @SolanaK9S | @Eyekonstudio"; location field "EYEKON CREATOR"; Flip.gg lootbox deployed (PROOF DD) |
| @MOBCollective_ | unattributed | mobcollective.sol self-disclosed; 39 raffle mentions; raffles crew SPL tokens on platform (PROOF DD) |
These handles self-disclose crew roles in their public X bios or have documented compensated promotional arrangements with crew operators.
Bio verbatim: "Founder @SolanaK9S | Content creator & Streamer | @Eyekonstudio". Location field verbatim: "EYEKON CREATOR". Tweet [2026-04-10]: "I invested in a seed round in @PlayOnClutch in 2024 through @EYEKONSTUDIO and those mfers still haven't launched" — financial relationship documented. Closes the direct structural link between @SolanaK9S and @EYEKONSTUDIO / @AiFlippa.
Bio verbatim: "A Solana-based NFT project by @GotmLabz — built on Art, Community, Utility, and Real Rewards." Of 36 total follows, 12 are documented crew handles (33%). @moon_blaze_ named as founder. Trait Store mechanic. gotmlabz.io linked twice in pinned content.
13 crew handles followed. shift3.app linked directly 2026-05-10 for an NFT swap mechanic. launchmynft.io + nftlaunch.app both linked. 39 gambling / raffle mentions in 200 tweets — actively raffles GotmLabz SPL tokens + ThePandarianz + BoredApeSolClub NFTs + northlandersnft simultaneously. Self-disclosed wallet via mobcollective.sol. US East Coast timezone (matches Florida crew). @XElementia mentioned 4×.
Founded by @degenbrody (above). Follows @AiFlippa + @dak_daze + @GotSOLpay + @degenbrody. @AiFlippa mentioned 10×, @GotSOLpay mentioned 20× in 200 tweets. Published a K9S Spotlight post promoting AiFlippa + GotSOLpay. Deployed a Flip.gg lootbox (75 likes, 23 RTs) — same Flip.gg-mechanic distribution model documented in PROOF T. Domain k9casino.io in link history.
Bio self-discloses "CM @Omerta_Sol + Team @MOBCollective_" — confirmed dual role across two crew projects. Follows 15 crew handles (highest in this batch). 13 mentions of @live4fun67. Active RT amplifier of Omerta lootbox refill announcements. 2013-created account lends false credibility to recent crew promotion.
June 2025 account. 74 of 120 tweets are saturation-level Gen1 mint pushes for @ThePandarianz. Self-discloses receiving a BASC NFT as a mint-bounty reward from @DJSOL98 + @ThePandarianz — confirms an undisclosed compensated promotion arrangement. Posted shift3.app, nftlaunch.app, metamate.pro links.
92 followers but 12 crew handles followed including @GotmLabz, @moon_blaze_, @dak_daze simultaneously — rare insider-grade combination. 53 direct @SiNftGod mentions. Explicit description of real-world apparel orders from PuffsterzInk + a personal launch called "743 Running." Low-follower / high-crew-proximity ratio is the classic inside-operator signal.
Six handles documented RT-ing @live4fun67 and @ThePandarianz within the SAME 72-hour window. That is not organic engagement — that is a structured amplifier rotation.
Self-discloses tomanovski.sol in bio → resolves to HcPUAejg…cyFjPH. WALLET ATTRIBUTED — eligible for full operator-graph cross-reference.
Posts Orbis referral link with code ?ref=4WG8P, names @GotmLabz as the builder — attributable financial relationship with the crew marketplace.
Posts Orbis referral code ?ref=CU9KW — second attributable financial link to the crew-marketplace referral system.
Follows both @AevonNFT + @BelleDonneDAO (low-follower crew accounts). Mentions @gambullscasino 3× alongside crew projects. Self-disclosed theawfulwafful.sol → resolves to 7aBrVB9K…u9yn.
Self-discloses $EMPIRE token contract in multiple tweets. Documents his own lootbox + scratcher gambling on @Omerta_SOL — direct user evidence of the gambling-mechanics under the NFT wrapper.
RT-rotation amplifier (live4fun67 + ThePandarianz cycle).
SAME PERSON — @FunksonSol is the project account, @oxd_duo is the founder. Self-declared two collections launched on LaunchMyNFT.io.
Follows @Owltopia_sol directly (= aiflippa operator wallet H6n2bv6p per PROOF B). @MOBCollective_ posted public appreciation tweet (30 likes, 10 RTs). Runs BASC giveaways. Public intent to revive @MonkeRejects.
Publicly named CURATOR alongside @EYEKONNFT at Art Basel December 2024 — embedded in the EYEKON brand ecosystem. Follows @LaunchMyNFT, @XGinsu, @degenbrody, @MOBCollective_.
Deployed Flip.gg lootbox. Follows @GotmLabz.
Not crew-operated, but documented crew-legitimization: GotmLabz airdrop inclusion, Flip.gg lootbox deployment for holders, named @THC_Labz security-network partnership claim ("340,000 members across 40 communities").
PROOFS A through U treated the wallet H6n2bv6p…W6DUg as the operator's portfolio. PROOF V documents an additional finding that strengthens — rather than weakens — that thesis: H6n2bv6p was created on 2025-09-09 via an AllDomains TLD claim and is only 8 months old. The 129 .sol portfolio + brand domains (thclabz.sol, the four Florida names, the cannabis squats) were transferred to this wallet for consolidation — an op-sec move that signals a deliberate identity-laundering pass. The OLDER wallet that originally registered the brand identities is a separate address — and that older wallet was funded by a Flip.gg-vanity-prefix wallet.
H6n2bv6p…W6DUg's on-chain history shows 2,493 total signatures, with earliest activity on 2025-09-09 16:51 UTC. The genesis transaction is an AllDomains ClaimDomainByTldDelegateAuthority call buying flippa.skr — H6n2bv6p was created as the new owner of a freshly-claimed domain. The fee-payer was an AllDomains relayer service wallet, not the operator's earlier infrastructure.
Resolving the thclabz.sol domain account on-chain and walking its transaction history backward reveals the original registration: 2024-04-06 05:16 UTC, registered by wallet Dhe1CVjXj4uf1dMNkNKpwi9qetsL4HvubFxhKCeyUG58. This is the older operator wallet. The THC Labz brand existed in this wallet's hands for ~18 months before being transferred into the consolidated H6n2bv6p portfolio.
The oldest signature returned by public-RPC indexing for Dhe1CVjX… is dated 2025-06-10 22:21 UTC, and the fee-payer of that transaction is FLiPGqowc82LLR173hKiFYBq2fCxLZEST5iHbHwj8xKb — a wallet with a FLiPG-prefix vanity address matching the Flip.gg operational naming convention (the same convention used by the Flip.gg dust cluster wallets FLiPgGTXt…, fLiPgg2yT…, FLiPggWY… documented in PROOF E).
Vanity prefixes of this length and consistency are not coincidental — they require dedicated grind compute and are a deliberate brand-signalling pattern. The presence of an additional FLiPG-vanity wallet co-signing with the older operator wallet is on-chain evidence of continued Flip.gg operational ties at the older-wallet level.
| Date (UTC) | From (Flip.gg-side) | To (operator-side) | Type |
|---|---|---|---|
| 2022-08-09 | Flip.gg Hot 1 (verified by playflipgg.sol) | Flip.gg Relay 4qYktnw… |
0.999847 SOL seed (PROOF E) |
| 2024-01-17 02:32 | Flip.gg Relay 4qYktnw… |
AAR-L Member 1 MNzFR9oga… |
0.1 SOL genesis (PROOF Q) |
| 2024-01-17 02:46 | Flip.gg Relay 4qYktnw… |
AAR-L Member 2 4UjqFD1J… |
0.1 SOL genesis, 14 min later (PROOF Q) |
| 2025-06-10 22:21 | Flip.gg vanity wallet FLiPGqow… |
Older operator wallet Dhe1CVjX… |
Co-signed activity (PROOF V) |
Four independent on-chain events, three separate Flip.gg-controlled wallets, spanning 34 months. No reasonable reading of this evidence keeps Flip.gg and the operator's infrastructure at arm's length.
When an operator transfers all his brand identities into a fresh consolidated wallet in September 2025 and burns the older wallet down to a near-zero balance, the move accomplishes three things at once: (1) makes the "operator portfolio" look smaller in third-party label databases, (2) breaks one-step backward links from the brand identities to the older operational history, and (3) creates plausible deniability for the older wallet's earlier counterparties.
It does NOT, however, break two-step traces. The domain account's on-chain history recovers the original registrant. The consolidation move is op-sec against shallow analysis; it doesn't survive a deliberate look.
SNS (Solana Name Service) is the canonical decentralised naming layer for Solana. Each registered domain has an on-chain owner that is publicly visible. PROOF U documents the on-chain owners of 43 flip-themed and operator-adjacent .sol names.
| Domain | Owner (on-chain) | Identification |
|---|---|---|
playflipgg.sol |
2AQdpHJ2…rPicm | Flip.gg Hot 1 (the operational treasury) — closes the labelling debate. PROOF E's seed-funder of the launchpad chain IS Flip.gg's named treasury. |
flipgg.sol |
FLipgew…iCR3 | Vanity-prefixed wallet ("FLipg" prefix matches the Flip.gg dust cluster naming convention). Likely a Flip.gg marketing/dust-campaign wallet. Holds 0.012 SOL. |
play_flipgg.sol |
9eYT1GTD…yaDC | Different wallet from playflipgg.sol. Variant naming, separate ownership. Holds 0.238 SOL. |
flip.sol |
Bz2yTQAJ…WYT2 | Single-word "flip" — held by an unrelated wallet (0.0009 SOL). Squatter or pre-Flip.gg registration. |
| Domain | Pattern | Significance |
|---|---|---|
aiflippa.sol | Flip-themed (primary identity) | The X handle made on-chain official. |
flippaflips.sol | Flip-themed | "Flippa Flips" — gambling/coin-flip reference. |
flipcashapp.sol | Flip-themed payments | "Flip Cash App" — gambling-payments brand-zone. |
thclabz.sol | Crew NFT brand | The crew brand identity, owned by the same wallet. |
owltopia.sol | Crew NFT brand (concealed alt) | PROOF B documented this concealed alt-brand relationship. |
floridalife.sol · floridaborn.sol · floridaboy.sol · floridaguy.sol | Florida geography (×4) | Geographic self-identification (PROOFS C+R). |
stonedapebiz.sol · thestonedape.sol | Cannabis squat (×2) | Stoned Ape Crew brand squat — independent project, not crew-operated. |
The operator owns flip-adjacent names but NOT the canonical Flip.gg brand names. The canonical names (flipgg.sol, play_flipgg.sol, playflipgg.sol) are held by Flip.gg's own treasury and marketing wallets. The operator's portfolio holds personally-themed variants (aiflippa.sol, flippaflips.sol, flipcashapp.sol) plus the brand domains of every "separate" crew NFT he operates plus his Florida-geography signals.
What this pattern fits: a connected employee, contractor, or ambassador of Flip.gg who built his own NFT-brand operation under personally-themed branding adjacent to the casino, while leaving the canonical Flip.gg namespace to the casino's official wallets. It does not fit: a fully independent operator with no Flip.gg relationship (they wouldn't own 3 personally-themed Flip-variant names), nor does it fit a Flip.gg owner (they'd hold the canonical namespace too). The middle ground — insider, employee, or ambassador running a parallel NFT operation that the casino seeded — is what the on-chain evidence supports.
This THC Labz / @AiFlippa investigation is the unifying frame. The deeper per-brand investigations below pre-date this page and each documents a different operator-attributable corner of the same network.
Same operator playbook across all sibling investigations: NFT brand → crew-deployed lootbox / wheel / scratcher mechanics → closed-loop token economy → wash-trade or Flip.gg-launder cash-out. The THC Labz page above is the synthesis; each sibling page is the per-brand evidence.
THC Labz, Owltopia, and the 127 other .sol names in the operator's wallet are not coincidences. The operator's chosen primary identity is a Flip.gg-themed handle. The same Flip.gg hot wallet — verified on-chain as the Flip.gg treasury by virtue of owning the playflipgg.sol Bonfida domain (PROOF U) — seed-funded the launchpad program every "separate" crew NFT brand mints through (PROOF E) AND directly funded the genesis of two of three launchpad multisig members 14 minutes apart in January 2024 (PROOF Q). That launchpad is controlled by a 3-key Squads V4 multisig with 2-of-3 threshold, now fully decoded (PROOF Q). The operator's geography is unambiguously Florida / EST, established by 14+ verbatim self-disclosures plus a timeline-wide posting-time histogram (PROOF R). His cross-chain identity is flippa.eth, self-disclosed in a Miami crew meet-up tweet — opening a Coinbase-KYC unmask path (PROOF S). The product every crew brand ships is the same set of slot/wheel/scratcher/coin-flip mechanics Flip.gg ships as a casino (PROOF T). And — most recently — the current portfolio wallet is only 8 months old; the OLDER operator wallet that registered THC Labz back in 2024 traces to a FOURTH Flip.gg vanity-prefix wallet, extending the funding chain across 34 months (PROOF V).
Four independent on-chain events. Three separate Flip.gg-controlled wallets. 34 months of continuous infrastructure ties. The op-sec consolidation move of Sept 2025 (transferring 129 SNS names into a fresh wallet) breaks shallow analysis but doesn't survive a deliberate trace. The corporate-records side is no better: FLIP GAMES LTD (Cyprus HE 456899) was incorporated 16 months AFTER product launch, in a jurisdiction where online casinos are prohibited; LaunchMyNFT shipped in 2022 with a press release falsely listing Binance Labs and Animoca Brands as investors — corrected 3 days later. Pine Analytics measured 74% of all Solana dusting transactions in observation windows attributable to Flip.gg wallets. Every receipt is in PROOF CC.
None of the above is inference. Every claim links to a transaction signature, an SNS resolution, a corporate-registry record, or a verbatim tweet you can verify yourself in under sixty seconds.