CYCLOPS LABS · FIELD GUIDE

Reading the chain.

A guide to on-chain evidence on Robinhood Chain. Edition 1 (2026-10-29), method v4. Live evidence read 2026-10-29 21:24 UTC.

Read it chapter by chapter

CHAPTER 01 · FOUNDATIONS

What a chain can tell you

A blockchain is a public ledger of who sent what to whom, and when. It records actions, never reasons.

Three kinds of statement

Everything in a scan is one of three things. Observed: read directly from the chain, such as a transfer, a balance, a swap or a contract event. Inferred: a hypothesis drawn from observations, such as two wallets sharing a funder. Unavailable: a source that failed or does not cover the case.

Keep them apart when you read. An observed transfer is a fact about the ledger. An inferred relationship is a reading of several facts, with other explanations that may also fit. An unavailable check is neither a pass nor a zero; it is a gap.

A scan is a snapshot

A scan reads the chain at the block it runs. Balances, liquidity and contract permissions can change in the next block. Every scan shows when it was read; check that time before acting on anything it says.

The same token scanned an hour apart can give different results because the chain changed, not because the method did. When the method changes, the score version changes with it and the score changelog says what moved.

What the ledger never holds

Names, agreements, intentions and off-chain messages are not on the chain. Two wallets controlled by one person look like strangers if they never touch each other on-chain; two strangers can look connected if they used the same exchange. Read every connection as a link in the ledger, not as an identity.

TERMS IN THIS CHAPTER Observed. Read directly from the chain at scan time: a transfer, balance, swap or contract event. · Inferred. A hypothesis drawn from observations, with its reasoning and other explanations. Shared funding does not prove common control. · Unavailable. A source failed or does not cover this case. Never counted as zero or as passed. · Snapshot. A scan describes the chain at the block it ran. Balances, liquidity and permissions can change right after.

CHAPTER 02 · HOLDERS

Who holds the supply

Concentration is the first thing to read: how much of the supply sits in how few wallets, and whether those wallets are linked.

Top ten, minus the pool

The holder table lists the largest wallets outside the liquidity pool. The pool holds tokens for trading, not for one owner, so it is excluded. The method flags the top ten holding 30% or more of supply, and weighs it more at 50%. One wallet holding 10% or more is flagged on its own.

Clusters change the arithmetic

Ten wallets holding 3% each read very differently if all ten were funded by the same address. A cluster groups wallets linked by a shared funder, by transfers between them, or by buying in the same transaction. A cluster holding 8% or more is flagged; 20% or more weighs more.

A cluster is a set of links. It suggests the wallets may move together; it does not establish who controls them. Exchanges, bridges and routers fund thousands of unrelated wallets, so a shared funder that is one of those never links wallets on its own.

How to read it

Select holders in the lab to see their combined share. Open a cluster to see the links behind it and how strong each one is. Then ask the practical question: if this group sold together, what would the pool return? The exit curve answers that from the pool’s reserves.

TERMS IN THIS CHAPTER Cluster. Wallets linked by a shared funder, transfers between them, or buying in the same transaction. · Linked wallets. Wallets tied to the creator by funding or transfers. Reported as their share of supply.

CHAPTER 03 · LAUNCH

The first blocks

Most of what a launch will become is visible in its first minute: who bought, how fast, and with what money.

Bundles and snipers

Supply bought in the launch block or blocks by wallets that share a funder or a block is counted as bundled. 5% or more is flagged, 15% or more weighs more. Five or more buyers in the first seconds after the pool opened are flagged as snipers.

Timing alone does not prove a private bundle was submitted to a block builder; that needs a relay or transaction source the scan does not have. What the scan shows is the measured share and the wallets behind it.

Fresh wallets and shared gas

A fresh wallet has almost no history before it bought. When 40% or more of the top holders are fresh, the method flags it. When four or more wallets got their first ETH from one source within two blocks, they are flagged as gassed together.

Fresh wallets have ordinary explanations too: new users, privacy habits, a trader rotating addresses. The flag records the pattern; the funding trail is where you test it.

TERMS IN THIS CHAPTER Launch bundle. Supply bought in the launch block(s) by wallets sharing a funder or a block. · Sniper. A wallet that bought in the first seconds after the pool opened. · Fresh wallet. A wallet with almost no on-chain history before it bought. · Gassed together. Wallets that got their first ETH from one source within two blocks.

CHAPTER 04 · FUNDING

Following the money in

Every wallet got its first ETH from somewhere. Following that trail back is how wallets that never trade with each other turn out to share a source.

Hop by hop to a hub

The funding trail follows first-funding transactions back, one hop at a time, until it reaches a hub: an exchange, a bridge or a router. Hubs end the trail because everyone uses them. A labelled hub never links two wallets.

Below the hub, a shared funder links wallets. When that link ties a wallet to the token’s creator, the wallet counts as linked to the creator, and the share of supply those wallets hold is reported. 3% or more is flagged; 10% or more weighs more.

Many wallets, one source

Sybil wallets are wallets funded alike by one source or airdropped in bulk. When they make up 25% or more of the wallets checked, the method flags it. The list of wallets and the funding transactions are in the scan.

Testing a link

Open the funding transaction in the block explorer. Check the amount, the time and whether the funder sent to many other wallets. A funder that sent to hundreds of unrelated wallets is more likely a service than a person; the scan’s labels improve as these are found and recorded.

TERMS IN THIS CHAPTER Funder. The address a wallet first received ETH from. · Hub. An exchange, bridge or router that funds many unrelated wallets. Funding through a hub never links wallets on its own. · Funding trail. The chain of first-funding transactions behind a wallet, followed back hop by hop until it reaches a hub. · Sybil wallets. Wallets funded alike by one source or airdropped in bulk.

CHAPTER 05 · CREATORS

The creator’s record

The wallet that deployed a token leaves a record: what it kept, what it sold, what it moved off-market, and how its earlier launches ended.

This launch

The creator wallet holding 10% or more of supply is flagged, and so is selling 50% or more of what it had. Tokens the creator sent to other wallets without a trade, 2% or more of supply, are flagged as off-market transfers, and the receiving wallets are listed.

Earlier launches

A creator’s earlier Torch launches are listed with their recorded outcomes. One or more that collapsed or ended with the creator sold out weighs 25, the heaviest single check. Three or more other launches in 14 days are flagged as serial launches, and early buyers who were also first-minute buyers in the creator’s earlier launches are flagged as repeat early buyers.

Other creators tied to this one by a funding source or identical bytecode are shown as the same team, with how each link was made. A first launch has no history to read, which is not the same as a clean one.

How we write about creators

Every statement about a creator restates a measured fact: an amount, a share, a count, an outcome by a fixed rule. The record describes what a wallet did, never why. A creator who thinks the record is wrong can ask for a correction, and the decision is published.

TERMS IN THIS CHAPTER Creator. The wallet that deployed a token through the launchpad. · Off-market transfer. Tokens the creator sent to another wallet without a trade. · Repeat early buyer. An early buyer who was also a first-minute buyer in the same creator’s earlier launches. · Serial launches. Three or more other tokens from the same creator in the last 14 days.

CHAPTER 06 · CONTRACTS

Liquidity and code

A pool holds the money a sale draws from; the contract decides the rules. Both can change, and both can be read.

The pool

Pool liquidity under $5,000 is flagged as thin. A pool position not held by a known locker is flagged as unlocked. A lock answers one question, when the position can be withdrawn; it says nothing about minting, taxes, upgrades or other pools.

Quoted liquidity is not executable depth. The exit curve shows what selling a given bag into the pool would return at each step, from the pool’s actual reserves.

The contract

A buy tax over 10% is flagged. Owner powers such as minting, pausing or changing fees are read from the code and reported with the scan. An upgradeable proxy is read from its storage slots: who the admin is, and whether a timelock applies. Bytecode that differs from the launchpad’s standard template is shown as a diff.

The sell simulation tries one sale along one route at the moment of the scan. Passing it once does not mean a sale will go through later. A simulation that could not run is shown as unavailable, never as passed.

TERMS IN THIS CHAPTER Liquidity. The value in the token’s pool at scan time. A dollar figure is not a promise that a sale executes at that value. · Liquidity lock. A pool position held by a known locker contract until an unlock time. One check, not a guarantee of anything else. · Trade tax. The share of each buy or sell taken by the token or launchpad contract. · Sell simulation. A sale simulated along one route at the moment of the scan. Passing once does not mean a sale will go through later. · Upgradeable proxy. A contract whose code can be replaced by an admin. Cyclops reads the proxy slots and says who the admin is and whether a timelock applies. · Template deviation. Bytecode that differs from the launchpad’s standard token template, with the instructions added and removed.

CHAPTER 07 · PATTERNS

Volume, names and lookalikes

Some patterns are about the market around a token rather than its holders: volume that goes in circles, and names borrowed from earlier launches.

Round trips

Volume that went round-trip in repeated buy-and-sell pairs is counted as wash trading; 20% of volume is flagged and 40% weighs more. Two wallets passing tokens back and forth also fire it. Volume is the number most launch boards sort by, which is why it is worth checking.

Borrowed names

An earlier token with the same name or ticker is flagged as a copycat. Names written with characters from another script that read as an earlier token are shown with each lookalike character and the script it came from. A logo or description reused from other creators’ launches is shown with the launches it matches.

TERMS IN THIS CHAPTER Wash trading. Volume that went round-trip in repeated buy-and-sell pairs, or tokens passed back and forth between two wallets. · Copycat. An earlier token launched with the same name or ticker. · Lookalike characters. A name or ticker written with characters from another script that read as an earlier token’s name.

CHAPTER 08 · OUTCOMES

How launches end

Separately from the score, every launch is followed after it opens and given one outcome by fixed rules. The cases below are read live from that record.

Four outcomes, fixed rules

Creator sold out: the price fell 80% or more from its peak while the creator wallet sold. Collapsed: the price fell 90% or more from its peak. Went quiet: no trades for three days. Still trading: none of the above.

The rules use the pool’s price and the creator wallet’s balance, nothing else. An outcome describes what happened on-chain; it is not a finding of intent or wrongdoing.

Why outcomes matter to the score

Outcomes are how the method is held to account. Calibration measures how often launches in each band went on to collapse or sell out; the flag record measures how often each flag preceded one. Both are published and both move as the record grows.

TERMS IN THIS CHAPTER Outcome. What happened to a launch by fixed rules on its price and the creator wallet’s balance. Not a finding of intent. · Creator sold out. The price fell 80% or more from its peak while the creator wallet sold. · Collapsed. The price fell 90% or more from its peak. · Went quiet. No trades for three days. · Still trading. None of the other outcomes applies; trading continues.

CHAPTER 09 · LIMITS

What a scan cannot see

The most useful habit is knowing where the evidence stops. Every scan says which of its inputs were read in full.

Gaps inside a scan

Funding traces still pending, trades not yet priced, a contract read that failed, a pattern check that did not run: each lowers the scan’s data completeness and widens the range the score could fall in. Missing data mostly hides risk, so the range reaches further up than down.

Gaps outside any scan

Off-chain coordination, people using exchanges between wallets, and the next block are outside what a ledger can show. A scan covers one chain at a time. It cannot predict a price and it is not investment advice.

Checking us

Every scan can carry a signed receipt over its hash, so anyone can check it was not changed after it was published. If a scan, a label or a page is wrong, ask for a correction: requests are acknowledged within 48 hours and decided within 7 days.

TERMS IN THIS CHAPTER Data completeness. The share of a scan’s inputs that were read in full. Missing inputs widen the score’s range, mostly upward. · Scan receipt. A signature over the scan’s hash, so anyone can check a scan was not changed after it was published. · Scan hash. The SHA-256 of the scan’s canonical JSON (keys sorted, no whitespace). A browser can recompute it. · Correction. A request to fix a label, a flag or a page. Acknowledged within 48 hours, decided within 7 days.

cyclopslabs.dev/field-guide · Outcomes describe what happened on-chain, never why. Not investment advice.