OAK — OnChain Attack Knowledge

Worked example · 2025-01

$TRUMP and $MELANIA presidential / first-spouse memecoin launches — Solana — 2025-01

Loss
approximately $4.3B in retail mark-to-market loss across the $TRUMP price collapse window from peak (~$73 / $45.50 closing high on 2025-01-19) to subsequent decline (~$3.00 by 2026-Q1, a ~93.4% decline from closing high); a small cohort of insider wallets cleared more than $1B in extraction (per Time / DL News reporting). For $MELANIA: ~89% of token supply was attributed by Bubblemaps to insider wallets (split across 30/30/20/6% wallets cloned from a single 89% address); on-chain reporting (April 2025) documented ~$30M of "community-fund" tokens being silently sold by the team without explanation. The structural loss across both tokens is the transfer of value from retail buyers entering on the post-launch attention window to the insider allocation cohort that received their position outside the public-distribution disclosure (per Bubblemaps).
OAK Techniques observed
OAK-T3.004 (Influencer-Amplified Promotion-and-Dump — primary; the presidential/first-spouse official social-media channels were the distribution surfaces) + OAK-T1.004 (Blacklist / Pausable Weaponization — boundary case; the SPL token retained freeze authority at deployment per standard Pump.fun non-renounced contract template) + OAK-T5.001 (Hard LP Drain — the insider-coordinated extraction of >$1B across the promotional-event cadence aligned to vesting unlocks) + OAK-T3.001 (Sybil-Bundled Launch — 89% of $MELANIA supply in clustered insider wallets per Bubblemaps, split 30/30/20/6% from a single origin address) + OAK-T17.001 (Cross-Venue Arbitrage-Driven Price-Discovery Distortion — composing sub-pattern; the $TRUMP token's near-immediate listing on Binance, Coinbase, Kraken, and other major CEXes created a multi-venue price-discovery surface; the endorsement-driven pump on Solana DEX propagated to CEX order books at inflated levels, and the insider extraction executed across the multi-venue liquidity pool, producing cross-venue price-discovery distortion in which the CEX-listed price reflected endorsement-amplified demand rather than float-adjusted equilibrium). Note: the disclosed-but-concentrated-allocation + promotional-cycle-extraction sub-pattern ($TRUMP) and the allocation-disclosure-divergence sub-pattern ($MELANIA) are proposed for formal v0.x sub-Technique treatment in TAXONOMY-GAPS.md; T3.004 covers the influencer-amplification distribution surface, T5.001 covers the extraction leg, and T17.001 covers the cross-venue price-discovery distortion from the multi-CEX listing layer.
Attribution
inferred-strong. Bubblemaps published wallet-cluster analyses for both $TRUMP and $MELANIA documenting the insider allocation patterns. The $MELANIA SDNY amended class-action complaint (October 2025) names Hayden Davis, Benjamin Chow (Meteora co-founder), Kelsier Ventures, and 15+ alleged template-cloned token launches including MELANIA. ZachXBT, Lookonchain, and Arkham published independent cluster-fingerprint analyses. For $TRUMP, the 80% supply concentration in CIC Digital and Fight Fight Fight LLC is publicly disclosed (per the official $TRUMP project documentation); the structural critique is the gap between public-distribution claims and the insider-controlled float dynamics, not a denial of the disclosure itself. No US criminal proceedings public against the $TRUMP / $MELANIA operators at v0.1 cutoff; SDNY civil class-action proceedings ongoing against the $MELANIA / Kelsier operator cluster.
OAK-Gnn
unattributed at v0.1 for $TRUMP; the $MELANIA case is part of the candidate Hayden Davis / Kelsier Ventures operator-cluster cohort (see also examples/2025-02-libra-milei-presidential-pump-dump.md and the cross-cohort writeup examples/2025-01-hayden-davis-kelsier-cluster.md).
Key teaching point
$TRUMP and $MELANIA together establish OAK's canonical worked example for the official-team-launched memecoin with structured promotional-cycle extraction sub-pattern. The two tokens differ in a structurally important way: $TRUMP's supply concentration was publicly disclosed (and the structural critique is the promotional-cycle-extraction pattern aligned to vesting unlocks), while $MELANIA's actual on-chain allocation diverged from its publicly-stated allocation breakdown. The two together motivate two distinct v0.x sub-Techniques (T5.x for promotional-cycle extraction; T1.x for allocation-disclosure-divergence) within the broader cohort.

Summary

On 2025-01-17 (three days before inauguration), the $TRUMP token was launched on Solana under the official-Trump-team branding via CIC Digital LLC and Fight Fight Fight LLC. The 1B token total supply was structured with 800M tokens (80%) controlled by the two Trump-affiliated entities under a vesting schedule extending over three years; only 200M tokens (20%) were initially offered to the public. On 2025-01-19, two days later, $MELANIA was launched on Solana, branded around First Lady Melania Trump.

The $TRUMP token peaked at approximately $73 per token shortly after launch and at a closing high of approximately $45.50 on 2025-01-19. The $MELANIA launch produced an immediate ~40% decline in $TRUMP's price (per CryptoBriefing reporting) as market-attention bifurcated and insider sell-pressure overlapped across the two tokens. By 2026-Q1, $TRUMP had declined to approximately $3.00 (~93.4% from closing high); aggregate retail mark-to-market loss reported by Time and DL News at approximately $4.3B, with insider extraction reported at >$1B.

For $MELANIA, Bubblemaps published wallet-cluster analysis documenting that 89% of token supply was initially controlled by a single wallet that was subsequently split into four wallets holding 30%, 30%, 20%, and 6% of supply. The project's website-published allocation breakdown earmarked 35% for "public distribution" and "community" — Bubblemaps' on-chain analysis demonstrated this allocation breakdown was inconsistent with the actual on-chain supply distribution. On 2025-04-07, Bubblemaps documented an additional ~$30M of tokens labelled "community funds" being sold by team-controlled wallets without public explanation. In October 2025, the SDNY class-action complaint was expanded to name Hayden Davis, Benjamin Chow (Meteora co-founder), Kelsier Ventures, and at least 15 allegedly-template-cloned token launches including MELANIA.

The $TRUMP launch did not produce equivalent SDNY civil litigation at v0.1 cutoff; the 80% supply concentration in CIC Digital LLC and Fight Fight Fight LLC was publicly disclosed and the legal critique focused on political-conflict-of-interest concerns (per Time, January 2025) rather than on undisclosed insider allocation per se. Two promotional events — a May 2025 dinner at Trump National Golf Club for top $TRUMP holders and an announced April 2026 gala at Mar-a-Lago — produced temporary price spikes without reversing the long-term decline.

Why this is structurally novel

The $TRUMP and $MELANIA launches together establish a structural sub-pattern that is distinct from the LIBRA / HAWK cases: official-team-launched memecoin with disclosed-but-concentrated genesis allocation + structured promotional-cycle extraction. Three structural features distinguish this sub-pattern:

  1. The supply concentration is publicly disclosed but structurally extractive. The 80% $TRUMP supply concentration in CIC Digital LLC and Fight Fight Fight LLC is publicly disclosed; the structural critique is not non-disclosure but the vesting schedule + promotional-cycle extraction combination. Each promotional event (the May 2025 Trump National dinner, the April 2026 Mar-a-Lago gala) creates a temporary demand spike during which the vesting unlocks can be sold into elevated price. This is structurally distinct from LIBRA-class extraction where the operator is anonymous and the extraction is undisclosed; the $TRUMP pattern is disclosed concentration + structured demand-spike extraction. The OAK Technique class needs to name this sub-pattern — it is a recurring structural risk in any token launch where the deployer-affiliated entity controls majority supply under a public vesting schedule and operates a promotional-event cadence that produces demand spikes aligned to the vesting unlocks.

  2. The on-chain allocation diverges from the website-stated allocation ($MELANIA). Bubblemaps' analysis demonstrates that the publicly-stated $MELANIA allocation breakdown (35% public distribution / community) was inconsistent with the actual on-chain supply distribution (89% in clustered insider wallets). This is a different structural defect from $TRUMP — it is non-disclosure of the actual allocation. The OAK Technique class needs to distinguish disclosed-but-concentrated (T5.x sub-pattern, $TRUMP-type) from undisclosed-allocation-divergence (T1.x sub-pattern, $MELANIA-type). Both are insider-allocation patterns; the structural-defect type and the appropriate detection / mitigation surface are different.

  3. The official-team-launch endorsement-source trust-tier is sovereign-equivalent. The Trump entities' official-channel endorsement of $TRUMP and $MELANIA is structurally adjacent to the LIBRA / Milei sovereign-endorsement case but with a different attribution chain: the launching entities are the operators, not the endorsers-as-amplifiers. The LIBRA pattern is operator launches, sovereign amplifies; the $TRUMP / $MELANIA pattern is sovereign-affiliated entity launches and amplifies. The accountability chain is correspondingly different — Milei was personally investigated by Argentine prosecutors; the Trump entities have not been investigated as launch operators at v0.1 cutoff (the SDNY $MELANIA suit names Davis / Chow / Kelsier as the operating cluster, not the Trump family).

Timeline (UTC)

When Event OAK ref
2025-01-17 $TRUMP token launched on Solana via CIC Digital LLC and Fight Fight Fight LLC; 1B total supply with 800M (80%) held by Trump-affiliated entities under three-year vesting; 200M (20%) initial public float T1 (concentrated supply at genesis with disclosed lockup)
2025-01-17 → 01-19 $TRUMP peaks at ~$73 / closing high ~$45.50 on 2025-01-19; market cap > $30B at peak (post-launch demand spike)
2025-01-19 $MELANIA launched on Solana; immediate ~40% decline in $TRUMP price (market-attention bifurcation + insider sell-pressure overlap) T5.x candidate (overlapping-launch demand-bifurcation leg)
2025-01-19 → 01-22 Bubblemaps publishes wallet-cluster analysis: 89% of $MELANIA supply initially in single wallet, split into four wallets (30/30/20/6%); on-chain allocation diverges from website-stated 35% public-distribution claim T1.x candidate (undisclosed-allocation-divergence leg) + (community forensic surface)
2025-01-22 CoinDesk reports broad crypto-industry insider critique of $TRUMP launch ("biggest critics are crypto industry insiders") (industry critique surface)
2025-04-07 Bubblemaps documents additional ~$30M of "community funds" in $MELANIA sold by team-controlled wallets without public explanation (continued extraction surface)
2025-05 $TRUMP holder dinner at Trump National Golf Club for top holders; demand spike produces temporary $TRUMP price elevation aligned with subsequent vesting-unlock window T5.x candidate (promotional-cycle-aligned extraction leg)
2025-10 SDNY class-action complaint expanded to name Hayden Davis, Benjamin Chow (Meteora), Kelsier Ventures, and 15+ alleged template-cloned token launches including $MELANIA (US civil litigation — $MELANIA cohort)
2026-04 Announced Mar-a-Lago gala for $TRUMP holders; further promotional-cycle alignment with vesting-unlock cadence (ongoing promotional-cycle extraction)
Continuing $TRUMP at ~$3.00 (~93.4% from closing high); aggregate retail loss ~$4.3B reported; insider extraction >$1B reported; no US criminal proceedings against $TRUMP / $MELANIA operators at v0.1 cutoff; SDNY civil class-action ongoing against $MELANIA / Kelsier operator cluster (attribution state)

What defenders observed

  • Pre-event: the $TRUMP allocation structure (80% to Trump-affiliated entities, three-year vesting, 20% public float) was publicly disclosed at launch. The $MELANIA allocation structure was publicly disclosed via the project website (35% public-distribution / community) but the on-chain supply distribution did not match the disclosure. The pre-event detection signal for the $MELANIA case was the consistency check between published-allocation and on-chain-allocation — this is the v0.x detection primitive that Bubblemaps demonstrated post-launch and that no major launchpad operates as a pre-launch gate at v0.1.
  • At-event: the $TRUMP and $MELANIA launches both produced visible large-volume insider-cluster transactions in the post-launch hours. The $MELANIA wallet-split pattern (single 89% wallet → four wallets at 30/30/20/6%) was visible on-chain in real-time. The detection signal — single high-concentration wallet split into N sub-wallets within K hours of launch — is the cleaner structural signature for the $MELANIA-type undisclosed-allocation-divergence sub-pattern.
  • Post-event: the public-record forensic surface combined Bubblemaps' wallet-cluster analyses, ZachXBT and Lookonchain on-chain forensics, the SDNY discovery process for the $MELANIA cohort, and Time / Fortune / DL News investigative reporting. The $TRUMP case has not produced a comparable civil-litigation surface at v0.1 cutoff; the structural critique focuses on the promotional-cycle-extraction pattern rather than on undisclosed-allocation. The $MELANIA case sits within the Kelsier / Davis cohort and shares the SDNY civil-litigation surface with the broader cohort.

What this example tells contributors writing future Technique pages

  • Disclosed-but-concentrated allocation + promotional-cycle extraction is a discrete sub-pattern. $TRUMP demonstrates that public disclosure of high supply concentration does not preclude structural extraction when the operator combines it with a structured promotional-event cadence aligned to vesting unlocks. Future T5.x examples should record the promotional-event cadence and the vesting-unlock cadence as paired observations; the alignment between the two is the structural signal.
  • Allocation-disclosure-divergence is a discrete sub-pattern. $MELANIA demonstrates that website-stated allocation breakdowns and on-chain supply distributions can diverge significantly. Future T1.x examples should record the on-chain allocation snapshot at TGE+1h, +24h, and +7d and compare to the project's stated allocation; the divergence metric is the structural signal.
  • The wallet-split pattern is part of the cohort's defense-evasion signature. The $MELANIA single-wallet-to-four-wallets pattern is a defense-evasion signature that obscures the cluster fingerprint at first inspection. Future cohort cases should record the wallet-split topology where the data permits; clustering-aware detection (Bubblemaps, Arkham, Lookonchain methodology) is the defender capability that surfaces the underlying single-controller pattern.
  • The official-team-launch sub-pattern is structurally distinct from the operator-launches-sovereign-amplifies sub-pattern. $TRUMP / $MELANIA are official-team-launches; LIBRA is an operator-launch with sovereign amplification. The accountability chains are different and the appropriate Mitigation classes are different. Future cohort cases should classify the launch as one of: official-team-launch, operator-launch-with-celebrity-amplification, operator-launch-with-sovereign-amplification, autonomous-bonding-curve-launch.

Public references

Discussion

$TRUMP and $MELANIA together establish OAK's canonical worked example for the official-team-launched memecoin with structured promotional-cycle extraction sub-pattern. The two tokens differ in a structurally important way: $TRUMP's supply concentration was publicly disclosed (and the structural critique is the promotional-cycle-extraction pattern aligned to vesting unlocks), while $MELANIA's actual on-chain allocation diverged from its publicly-stated allocation breakdown. The two together motivate two distinct v0.x sub-Techniques (T5.x for promotional-cycle extraction; T1.x for allocation-disclosure-divergence) within the broader cohort.

The $MELANIA case is the more straightforward fit within the Hayden Davis / Kelsier Ventures operator-cluster cohort — the SDNY amended complaint (October 2025) names $MELANIA as one of 15+ allegedly template-cloned launches. The $TRUMP case has not been integrated into the Kelsier civil litigation at v0.1 cutoff; the structural-attribution surface is correspondingly weaker for $TRUMP than for $MELANIA, but the disclosed-allocation framing means the $TRUMP critique is structural-policy rather than fraud-investigative.

For OAK's broader cohort coverage, $TRUMP / $MELANIA + LIBRA + HAWK collectively establish that the celebrity / sovereign-endorsement memecoin pattern recurs across late-2024 and 2025 with multiple structural variants — sovereign-amplification (LIBRA), entertainment-celebrity-amplification (HAWK), official-team-launch (TRUMP / MELANIA). The cohort is sufficient to motivate the v0.x T5.x and T1.x sub-Technique proposals; the cohort's structural diversity is informative for defender-practice generalisation across the broader memecoin-launch surface.

Techniques demonstrated (5)