- 900 new Bitget-funded wallets claimed 20% of the IRYS airdrop.
- Users appreciate the airdrop but worry about growing manipulation claims.
- aPriori faced a large Sybil attack involving thousands of connected wallets.
The IRYS airdrop, one of the most talked-about token launches this month, is now under scrutiny after on-chain analytics platform Bubblemaps published findings hinting that a large portion of the distribution may have been claimed by coordinated Sybil wallets.
They also shared new data showing that for 38 past tokens with major wallet clustering issues, more than half of the project teams listed the United States as their location, followed by Europe and India.
Unusual Wallet Activity Before Launch
According to Bubblemaps, suspicious activity began one day before the IRYS airdrop went live. The platform reported that 900 new wallets were funded by crypto exchange Bitget within tight time windows. Each wallet showed the same three traits:
- No previous on-chain history
- Received nearly identical amounts of ETH
- Claimed the IRYS airdrop immediately at launch
This cluster alone reportedly claimed around 20% of the entire airdrop supply. Bubblemaps also identified 20 separate funding batches, each sending ETH to about 50 wallets between November 21 and 24. All of these wallets displayed the same behavior pattern.
Related: Key Token Unlocks To Watch For In December, List Unveiled
Tokens Moved and Sent to Bitget
Bubblemaps found that about 500 wallets linked to the suspicious clusters moved all their IRYS tokens to fresh wallets and then sent them to Bitget.
Around $4 million worth of tokens has already reached the exchange, but Bubblemaps says there is still no evidence connecting the IRYS team to these wallets. The investigation is ongoing through Bubblemaps’ Intel Desk, where the community can vote to bring the case more attention.
Community members have also reacted to the latest developments. One contributor said, “2025 has been brutal for a lot of us, and that IRYS drop literally helped me pay bills when I needed it most. At the same time, I’m gutted seeing what’s happening in the community right now.”
A Similar Case Previously Hit aPriori (APR)
The IRYS issue is similar to an earlier problem with the aPriori (APR) airdrop. In that case, Bubblemaps discovered that almost 60% of the APR tokens were claimed by one unknown group using 14,000 connected wallets.
Later, investigators found that 80% of the tokens on BNB Chain went to about 5,800 wallets linked to a single cluster. aPriori had lowered its rules to make the airdrop easier for real users, but this also made it easier for Sybil farmers to take advantage. The company said no team or foundation members were involved, but the damage to the airdrop had already happened.
Related: Turkmenistan Legalizes Crypto Mining but Bans Use for Payments
Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.
