$PHP-UP / CVE-2026-109618

The dev is one of 2 linked wallets; together they created 18 coins we checked.

Coins they created: $MOON COIN, $NI, $GULP, $BAKDINU, $Truth, $DOTAI, $PHP, $PHP, $PHP-UP, $NORMIE, $Trencher, $umi

Linked when one first funded the other, or both bought in the same small launch crew. Busy wallets (exchanges, services) are never used to join wallets.

The dev, the wallets that bought the launch block, and holders the dev funded: how they're connected and how their earlier coins did. The launch map below draws the connections.

Creator wallet 2sohvvgzmcb5Wny59ZonNKmSpkhf64MBfpMEW8hPaxXM (from GeckoTerminal). 13 other coins from it in our records: Open the wallet ›

2 yellow9 red

$MOON COIN MOONTechSerial launcher: 13 other coins from this dev; website doesn't show this token's address; top 10 hold 100% 29 $0at scan 13d ago $NI Neural inuTechThe dev holds 0.3%, nothing against it on record; tech not tested yet 60 $0at scan 13d ago $GULPTechThe dev sold out, nothing against it on record; tech not tested yet 64 $0at scan 13d ago $BAKDINUNot scanned yet. – $0at scan 14d ago $Truth Truth TokenVampSerial launcher: 13 other coins from this dev; the same X post is linked by 9 other coins we've seen; top 10 h 29 $0at scan 14d ago $DOTAITechThe team's earlier coins: 9 of 9 fell 80%+ within a day; tech not tested yet 29 $0at scan 14d ago $PHP PHP-UP-2026Not scanned yet. – $0at scan 14d ago $PHP PHP-UP-2026TechThe team's earlier coins: 14 of 14 fell 80%+ within a day; tech not tested yet 30 $0at scan 14d ago $NORMIE NormieCoinVampSerial launcher: 13 other coins from this dev; copies the ticker of an older, bigger coin (a vamp) 32 $0at scan 14d ago $TrencherVampThe team's earlier coins: 14 of 14 fell 80%+ within a day; copies the ticker of an older, bigger coin (a vamp) 27 $0at scan 14d ago $umi yumi umiNarrativeSerial launcher: 13 other coins from this dev; the X account is suspended or doesn't exist 29 $0at scan 14d ago $umi yumi umiNarrativeThe team's earlier coins: 11 of 11 fell 80%+ within a day; the X account is suspended or doesn't exist 27 $0at scan 14d ago $PILL PILL YOUR FRIENDSTechSerial launcher: 13 other coins from this dev; tech not tested yet 28 $0at scan 14d ago

The creator in the middle, the wallets that bought in the launch block around it (bigger bubble = bigger share of supply), and the wallets that funded them on the outside. Buyers with the same colour were funded by the same wallet.

What we find when we compare the coin's website, code, token, launch timing, liquidity, ticker and wallets against each other and against public address labels.

• Linked walletsThe dev is one of 2 linked wallets; together they created 18 coins we checked. source
• The teamThe dev and 0 early buyer/holder wallets; 13 earlier coins together, outcomes still coming in. source
• The story behind itThe coin's story is an X post by @drilladev (verified) with 37 likes. The post names this coin. 3 other coins we checked use the same post. source
• Same ticker elsewhere1 other coin trades as $PHP-UP. None of them has a pool with real liquidity behind its price. source
• Contract permissions (GoPlus)GoPlus finds none of the risky permissions it checks for. source
• Creator's earlier coinsThis creator launched 13 other coins we checked.
• Reused X postThe X post x.com/drilladev/status/2112756838517051801 is also listed by 3 other coins we checked: $PHP-UP, $PHP-UP, $PHP-UP. source

• Checked isn't the same as safe: these checks describe what the token allows and what the website runs, not what anyone will do.
• "Nothing found" means not visible on the public page; servers and private code are invisible to us. Not financial advice.