$LARPBALL

Exposing the security risks they don't want you to see

Critical Findings

Two main wallets control ALL funds from registered projects
Registration gives permanent access to your dev wallet - no revoke option
Entire bot runs on ONE centralized server

Past Incidents:

Private keys exposed LIVE on stream
Full server compromise - keys accessed, code deleted, wallet drained

This isn't "what if" — it already happened.

Risk Assessment

💀

Slow Drain Attack

CRITICAL

Pooled funds from ALL registered projects can be gradually siphoned without detection.

🖥️

Server Update Redirect

CRITICAL

A single server update could redirect all creator fees to a different wallet.

📉

MM Wallet Dump

CRITICAL

The market-making wallet holds tokens across all projects. Can dump anytime.

🧟

Zombie Bot

HIGH

Bot stops working but creator fees keep flowing forever. No off switch.

🔑

Key Exposure Risk

CRITICAL

Private keys managed server-side. Already exposed once on stream.

👾

Single Point of Failure

CRITICAL

One centralized VPS controls everything. One hack = everything gone.

None of these require bad intent — only centralized control.

Price Action Evidence

Snowball price dump chart

Price action showing suspected manipulation — -50.6% dump captured on DEXTools

Wallet Monitor

Volume WalletView on Solscan →
CD2TNwRdREZM85Vuiz463jKZsdiJ5KWHvur3Qyeem8DG

Used for artificial volume generation - creator fees + trading profits flow here

Market-Making WalletView on Solscan →
2LZaHnUf4SvxVxJJnvVvVdtp3TeBySeSaFfmCDeLmfEn

Controls dip buys / rip sells - fully controlled by bot operator

Funds from ALL registered projects pool into these wallets.

Join The Exposure

$LARPBALL exists to spread awareness about centralized token infrastructure risks. DYOR before investing.

Contract Address:

CE5hEYzTBwUP5U2uDcmdfGHJMh7oh7VVPvKNP3Ffpump