Open holes
What still blocks a complete map
Pasteable next rounds live on Loop. Queries that find more cases live on Sensors.
What is the hit rate?
OpenWithout it, we cannot say if this is a cottage or an industry.
Sample 100 GitHub-routed Pump coins in a week. How many get a first-time social claim within 72h?
Who writes the InMails?
OpenThe story needs a named desk, not “the trenches.”
Trace Flurry deployer; scrape repeated DM templates; ask one bagworker to walk through a shift.
Do marks keep the money?
OpenYegge did. Many may fail KYC, get stuck in-app, or recycle into the curve — different morals.
Five interviews + CEX off-ramp anecdotes (Yegge/Schwab already a scene).
GitHub’s view
OpenThey host the identity being tokenized. ToS already bars starring-for-airdrops.
Ask GitHub security/legal whether social-fee PDAs using usernames violate anything they can enforce.
Isolated GitHub-PDA claim volume
OpenDune’s $11.9M/7d will be misread as “this scam’s take.”
Custom Dune on PumpFees claim_social_fee_pda, join SharingConfig, flag first-time GitHub IDs.
A mark who said no
In progressWithout a refusal, the map is only conversion.
Steinberger + Gajesh now in the binder. Interviews still owed. Search for a chorus of two more.
Did any charity actually receive the money?
OpenWithout it the halo variation is just DMs.
Donate.gg receipts, LCFA/Rainforest confirmation, Pump match on-chain or on paper.
Is GitHub impersonation real at scale?
OpenIf it is lore, it must not sit in the same cell as unsolicited gifts. If it is real, it is a different crime using the same phone book.
One account: created-at vs backdated commits vs mint vs claim wallet.
What does one week of the Medium-guide URL produce?
OpenA countable incoming queue. Without it “daily industrial loop” is still a vibe.
Archive every public post containing the claiming-guide URL for 7 days. Mark, mint, claimed Y/N. Same for first-time claim_social_fee_pda cards.
How many marks stay, then migrate for the fees?
OpenIf Project89 is unique, it is an anecdote. If it is a pattern, it is the fourth aftermath (claim / refuse / refund / stay-and-capture).
Two more named stay-and-migrate CTOs. Original deployer + 1% on-chain for Project89. Interview Parzival.
What share of a migrate.fun window becomes team treasury?
OpenIf unmigrated supply is 20%+, the “full transparency” CTO is a confiscation event with a how-to video. That is a different antagonist than a GitHub InMail.
HUSTLE on-chain vs the 23% self-report. Catcoin 26 Aug: 30.61% deposited, 69.4% remaining — recount at close ~7 Sep. Ask @MigrateFun what happens to silent bags by default.
Who runs migrate.fun — and did they say “full transparency”?
OpenThe user quote is the industrial voice. Without a named founder and a permalink, it is a vibe.
Source the quote. Jake Gallen / @MigrateFun / Emblem Vault. One on-record interview, or a filed entity.
Who runs Socialify — and how many coins has it actually launched?
In progressIf the antagonist is a company with a clawback, the map needs a name, a fee split, and a conversion. A product page is not a factory.
Round 13: operator still unnamed; wallet 0 SOL; @SocialifySolana silent; fee % unpublished; inventory SPA-gated. Next: login-gated scrape or a named bio paste.
Adjacent paths
Do not confuse the family
Fee vamping
In progressSame primitive (fee destination as trust signal) used by the actual deployer against holders.
Next: One named vamp with before/after recipient wallets.
GitHub notification phishing / fake CLAW
DoneSame target list (starred OSS repos) but the payload is a wallet drainer, not a fee PDA. Readers will conflate them; we must separate.
Next: One note: “There is a dumber crime that uses the same phone book.”
Claim screenshots as status
In progressBags culture treats a claim screenshot as a flex. That’s why pressuring the mark works.
Next: Collect 8 screenshots (anonymized) of bagworkers posting claim UIs.
Social handle reuse capturing fees
OpenIf fees attach to a Twitter/GitHub string, squatting the string is a theft of cashflow.
Next: The SPARK username swap reported on Bags — verify. Not the same as sprk.gg (killed TikTok wrapper).
Pump GO bounties
DoneMiles Klee already went here. Circular attention markets inside the same company.
Next: Cite, don’t re-report, unless a bounty was used to force a claim.
Hawk Tuah / LIBRA / account-hack coins
DoneUnwanted tokenization of a person. Different: usually insiders control supply, not fee-PDA-to-GitHub.
Next: Keep in “family of harms,” not in the mechanism section.
Get Bagged as a product name
DoneBags did not hide the unsolicited model. They branded it.
Next: Quote product copy, then the marks who did not find it clever.
Charity-coin DMs
In progressSame hunt, harder to call out in replies. Nonprofits can be pressured into shout-outs.
Next: LCFA and Rainforest on the record. Matching-funds claim vs Pump docs.
GitHub impersonation / backdated commits
In progressNot a gift to the mark — identity theft so the bagworker can claim.
Next: One reconstructed employee case, or kill the card as lore.
Launch-for-you wrappers
DoneSocialify turns bagwork into a website with a clawback. Spark proved the wrapper can vanish in four days.
Next: Socialify: name the operator, count coins, one bio paste. Spark: archive TOS, then stop leading with it.
Migrate.fun as a CTO product
In progressStay-and-capture is no longer a one-off ARG. There is a desk, a how-to, a fee, a checkmark for CTOs, and a $20M homepage claim.
Next: Who runs it. Catcoin close-out % when mig221 ends ~7 Sep. HUSTLE unmigrated on-chain.
Claim-Pad impersonation
In progressReaders will lump this with GitHub-notification drainers. Separate: the victim is obeying an official “claim MFT” instruction during a live window.
Next: Cluster the @MigrateFun* lookalikes (round 14: recycled pre-2015 IDs + costume names). One drained holder on the record. Watch BNB LP pull.