Exposed: “Ramarxyz” Sniped 70% of $WET Presale Using Over 1,000 Wallets – Then Demanded Refund

Summary: A troubling incident during the $WET token launch on the Solana blockchain has led to significant scrutiny of both the HumidiFi decentralized finance platform and Jupiter Exchange. An investigation revealed that one individual, known as “Ramarxyz,” used more than 1,000 wallets to scoop up around 70% of the presale allocation almost instantly. Following public outcry, HumidiFi canceled the bot-driven allocations and announced plans for a new token issuance.

Key Takeaways

$WET Presale Attack: A single entity, “Ramarxyz,” exploited the $WET presale using over 1,000 different wallets, claiming 70% of the tokens within seconds.
HumidiFi Response: The platform confirmed the bot activity and has since revoked the bot allocations, promising legitimate buyers a prorated airdrop.
Criticism of Jupiter Exchange: Experts criticized Jupiter for not implementing effective bot protection measures during the token sale.
Plans for New Token: HumidiFi will launch a new token and reissue it to genuine participants after the incident.

Exposed: “Ramarxyz” Sniped 70% of $WET Presale With 1,000+ Wallets — Then Demanded Refund

Chaos in the $WET Token Launch

A recent token launch involving the $WET presale on Solana has drawn critical attention to HumidiFi and Jupiter Exchange due to a botting incident. Blockchain investigators found that a single actor, operating under the pseudonym “Ramarxyz,” used more than 1,000 wallets to capture about 70% of the total tokens in the presale.

The presale, hosted on Jupiter’s Decentralized Token Formation (DTF) launchpad, sold out in a mere two seconds—before most retail investors even had a chance to participate.

Confirmation of Bot Activity

HumidiFi has confirmed that a large bot operation disrupted the presale. According to findings from Bubblemaps, approximately 1,100 out of 1,530 participating wallets were controlled by the same entity.

These wallets exhibited a distinct funding pattern, each receiving an exact amount of 1,000 USDC from centralized exchanges just prior to the sale.

Wallet Activity

An investigation identified one wallet that deviated from this pattern, showing funds traced back to the Twitter handle @ramarxyz. Despite these links, the individual suggested that HumidiFi should refund the presale allocation taken by the bots.

Shortly after, HumidiFi announced that all suspected bot transactions had been nullified, and genuine participants would receive a proportional airdrop instead.

Another detailed analysis by trader Gautam Mgg revealed that four wallets had claimed 40% of the presale using bots, with the top 10 wallets collectively securing 4% of the total allocation. Mgg also criticized Jupiter Exchange for not incorporating basic bot defenses, like CAPTCHA or address rotation.

Jupiter Exchange previously reported that the $WET token sale had successfully raised $5.57 million across Wetlist, JUP stakers, and the public sale, with public participants able to purchase 30 million tokens at $0.069 each, capped at $1,000 USDC per wallet. The tokens are expected to be available for claiming on December 9, coinciding with the launch of liquidity pools.

HumidiFi Plans to Reissue Token

In light of the bot attack, HumidiFi has decided to cancel the compromised launch and issue a new token. The platform confirmed that all legitimate Wetlist and JUP staker participants would receive an adjusted airdrop under an audited new contract, with plans for a public sale to follow.

Launched in mid-2025, HumidiFi has rapidly become one of Solana’s most active decentralized exchanges, processing over $1 billion in daily trading volume and often accounting for more than a third of all spot trading on the network. According to DefiLlama, its total DEX volume has approached $30 billion over the past month, while cumulative trading volume exceeds $122 billion.

Trading Volume

The $WET token was designed as a staking and fee-rebate asset, marketed as a community-focused distribution through Jupiter's DTF platform. This event has reignited discussions regarding the fairness of token distributions on launchpads.

Previously, in September, Bubblemaps highlighted another Sybil attack linked to the MYX token airdrop, where nearly 100 new wallets claimed around $170 million in tokens after receiving simultaneous funding from OKX. This incident similarly raised flags about the adequacy of identity controls and weaknesses in launch design.

Jupiter DTF was intended as a more transparent and trust-minimized option for token launches, combining curation with on-chain verification. The $WET sale represented its first live test, making its failure a significant setback for this model. No detailed analysis has yet been provided by Jupiter Exchange or the implicated individuals regarding what went wrong at the infrastructure level.