← All Case Studies
🔴 Documented Multi-Phase Manipulation ACTIVE EVENT

Cash Cat ($CASHCAT) A Live Forensic Record · Robinhood Chain · July 13–17, 2026

RPD fired its first alert at 8:59 AM on July 13th — before the liquidity pool even existed. What followed was a documented multi-phase drain of over $50M from 30,000+ retail holders. Every timestamp is on-chain. Every flag was visible from day one.

$50M+ Retail Losses
30,000+ Holders Affected
0% LP Locked (Day 1–Now)
8:59 AM Time of First RPD Alert
$10 Cost to Know
📡 See Live Token Scan → Scan Any Token Free →
"The forensic capability wasn't engineered in. It emerged from doing the protection work honestly. Timestamps because users deserve to know exactly when the alert fired. On-chain verification because the truth has to be provable. Sequential scanning because one snapshot isn't enough — the story moves and so should the tool."

ACTIVE EVENT — July 17, 2026 · WEEKEND HOLD PHASE: 94.6 → 6.1 → 88.8 → 206.5 → 29.6 → 39.5 WETH · Slow re-injection. Patient. Community narrative forming: "just accumulating." Pool rebuilding for Cycle 3 harvest. Score: 8/100. Same 2 flags. LP 0.0% locked. Since 8:59 AM July 13th.

1
The First Alert — July 13, 2026 · 8:59 AM
Before the liquidity pool existed

At 8:59 AM on July 13th, RPD's automated wallet monitoring system fired its first alert on $CASHCAT — a new meme token on Robinhood Chain (Chain ID #4663). The token had just been deployed. No liquidity pool had been created yet. The scan still returned a CRITICAL flag.

🚨 RPD Telegram Alert — July 13, 2026 · 8:59 AM

Token: Cash Cat ($CASHCAT) · Robinhood Chain

Risk Score: 70 / 100 — CRITICAL

  • 🔴
    NO LIQUIDITY FOUND No active trading pool detected at time of scan. Token cannot be reliably traded — or exited.
  • 🔴
    CONTRACT SOURCE NOT VERIFIED — CODE IS HIDDEN The contract at 0x020bfc65...291018b4 has not been verified on the block explorer. No one outside the deployer can read what the contract does.
RPD Sheriff's Desk Telegram alert — July 13 8:59 AM — CASHCAT Risk Score 70/100 CRITICAL
📱 RPD Sheriff's Desk Inner Circle — July 13, 2026 · 8:59 AM · Risk Score: 70/100 — CRITICAL
Why This Chain Matters

Robinhood Chain (Chain ID #4663) launched in 2025. Most token scanners — TokenSniffer, BWB Global, and others — return blank results or errors when queried against it. For anyone buying $CASHCAT on July 13th, the implicit signal from those tools was: "nothing flagged it." RPD covered Robinhood Chain from launch. When the scan fired, the engine had full visibility. The rest of the market was scanning blind.


2
The Second Alert — July 13, 2026 · 9:50 AM
51 minutes later. Same $10. The pool just appeared — and it was already a trap.

At 9:50 AM — exactly 51 minutes after the first alert — RPD scanned again. The liquidity pool had been created. The score dropped from 70 to 10.4 because the "no liquidity" flag cleared. But the alert that fired next was more important than any score.

⚠️ RPD Telegram Alert — July 13, 2026 · 9:50 AM

Token: Cash Cat ($CASHCAT) · Robinhood Chain

Risk Score: 10.4 / 100 — LOW

  • 🔴
    LP TOKENS NOT LOCKED — LIQUIDITY CAN BE PULLED AT ANY TIME "Lets the dev pull all the trading liquidity out instantly, crashing the price to zero (a 'rug pull')."
  • 🟡
    CONTRACT SOURCE NOT VERIFIED — CODE IS HIDDEN Still unverified. Contract mechanics remain unknown to anyone outside the deployer.
RPD Sheriff's Desk Telegram alert — July 13 9:50 AM — CASHCAT Risk Score 10.4/100 LOW — LP Not Locked
📱 RPD Sheriff's Desk Inner Circle — July 13, 2026 · 9:50 AM · Risk Score: 10.4/100 — LOW · LP Tokens Not Locked
Time of Alert
9:50 AM
July 13, 2026
Minutes After First Alert
51 min
Automated rescan
LP Locked
0%
Fully extractable
Subscription Cost
$10/mo
Both alerts included

The score went from 70 to 10.4 — not because the token got safer, but because the "no liquidity" flag cleared once the pool appeared. The aggregate score improved. The structural risk did not. The LP was live, active, and completely unprotected. RPD said it in plain language: "Lets the dev pull all the trading liquidity out instantly, crashing the price to zero."

That sentence was written on July 13th at 9:50 AM. It executed on July 17th.


3
Days 1–4: The Community Pumped It to $240M
The alerts sat unseen. The Telegrams lit up instead.

Between July 13th and July 17th, $CASHCAT pumped to a peak market cap of approximately $240 million. The FOMO app — a social trading platform — showed thousands of holders posting positions, calling bottoms, and encouraging each other. The psychological environment was a closed loop of confirmation bias.

Telegram Community — July 13–17, 2026

"Conviction remains the same and I will go down with the ship."

"Did yall forget Vlad followed the Twitter"

"$cashcat and $rob barbell"

"Cat runner is inevitable. Robinhood needs a meme — betting CASHCAT is the runner."

— FOMO App community posts, collected July 13–17, 2026

This is not mockery. These are the words of real people making real financial decisions in a community built around shared conviction. The same psychology that built communities around legitimate projects was being activated here — deliberately, against an unprotected liquidity pool. The degen culture — the "diamond hands" identity, the honor of holding through pain — became the mechanism of extraction. While people competed to show the most conviction, the deployer was quietly calculating something very different.


4
July 17, 2026: The Drain — Documented Live
94.6 WETH to 6.1 WETH in a single day

On July 17th, the deployer began withdrawing liquidity from the Uniswap V3 pool on Robinhood Chain. Not all at once — that triggers immediate alarm. Gradually. Patiently. While the community bought every dip. RPD captured each state in real time.

July 17 · Morning
94.6 WETH
Starting point — full pool value ~$360K
July 17 · Midday
69.8 WETH
24.8 WETH drained (~$94K). Community still buying.
July 17 · ~2:27 PM
8.4 WETH
86+ WETH extracted in hours. Pool effectively dead.
July 17 · ~3:00 PM
6.1 WETH
Drain continuing. ~$23K left to back 30,000+ holders. RPD scan captured live.
July 17 · Evening
88.8 WETH
First re-injection. Partial — not the full 94.6 WETH taken. The trap reset.
July 17 · Evening
206.5 WETH
Second re-injection — pool now MORE than double the original. Profits from first drain reinvested to set a larger trap.
July 17 · ~8:20 PM
118.3 WETH
Second drain begins. 88 WETH extracted from cycle 2 pool.
July 17 · 5:25 PM
103.6 WETH
Score: 8/100 · 2 flags · Same flags. Still falling.
July 17 · 5:49 PM
109.3 WETH
Score: 8/100 · 2 flags · accelerating.
July 17 · 5:52 PM
67.8 WETH
41 WETH drained in 3 minutes. Accelerating.
July 17 · 5:56 PM
29.6 WETH
🔴 Cycle 2 floor. 206 WETH → 29 WETH harvested. 38 WETH drained in 4 minutes.
July 17 · 6:07 PM
44.7 WETH
🟡 Cycle 3 re-injection begins. +15 WETH in 11 minutes.
July 17 · 6:39 PM
39.5 WETH
🟡 WEEKEND HOLD PHASE. Slow re-injection — deliberate, patient. Community forming "accumulation" narrative. Pool rebuilding for Cycle 3 harvest. Score: 8/100 · Same flags · Same locks.
RPD scan showing 6.1452 WETH remaining in CASHCAT liquidity pool
📡 RPD Live Scan — July 17, 2026 · ~3:00 PM · Liquidity: 6.1452 WETH · LP Locked: 0.0%

At 6.1 WETH, the pool backing 30,000+ holders contained approximately $23,000. The top holder on the FOMO app alone showed a position worth $218,576 — a position that required over $218,000 in buy pressure to exit. There was $23,000 in the entire pool.


5
The Holders: 30,000+ Bags With No Exit
6,578 visible on FOMO app. ~24,000 more silent on-chain.

The FOMO app — the social trading platform where CASHCAT had its community — showed 6,578 holders. These are the visible ones: the ones posting, calling bottoms, encouraging each other. On-chain data showed approximately 30,000 total holders. The other ~24,000 were silent — watching their wallets, hoping.

FOMO app leaderboard showing CASHCAT holders with significant losses
📱 FOMO App — July 17, 2026 · 3:07 PM · 6,578 holders · Token price $0.0460 · -9.49%
0xAvast Position
-55.87%
$218,576 shown · avg 11h hold
needledger Position
-72.08%
$126,255 shown · 1d 8h avg hold
iamjtxvi
-23.89%
$75,523 shown
asta
-28.86%
$71,230 shown
3:07 PM · Cycle 1 floor
FOMO app — 6,578 holders — pool at 6 WETH
6,578 holders · $0.0460 · pool at 6 WETH
5:33 PM · Re-injection bounce · metaversejoji +35%
FOMO app — 6,700 holders — metaversejoji +35%
6,700 holders · $0.0647 · "wow my copytraders are rich!"
5:46 PM · 13 minutes later · metaversejoji +31.78%
FOMO app — 6,696 holders — gains already fading
6,696 holders · $0.0627 · window already closing
7:15 PM · Cycle 2 fully drained · metaversejoji +7.03%
FOMO app — 6,645 holders — metaversejoji down to +7%, 0xAvast -50.88%
6,645 holders · $0.0511 · same caption. different reality.
Same Caption. +40% → +7.03%. Still Holding.

From 5:33 PM to 7:15 PM metaversejoji went from +35% to +7.03% — still posting "40% candle as soon as I bought it wow my copytraders are rich!" The caption didn't change. The position bled 33 percentage points. 0xAvast: -50.88% on $242,582. needledger: -68.92% on $140,122. 6,645 holders — down 55 from the peak. The window closed at 5:33 PM. The caption is a timestamp of the exact moment the trap closed.

The Copytrader Trap — Documented Live

metaversejoji posted "40% candle as soon as I bought it wow my copytraders are rich!" — entering after the re-injection pump. Their copytraders followed. 122 new people entered between 3:07 PM and 5:33 PM — during an active drain cycle — because the chart looked like recovery. The re-injection didn't just attract new buyers. It psychologically anchored existing holders deeper, turning -55% into -38% on paper and keeping them in the trap. The copytraders are now in too. The pool is still draining. LP still 0.0% locked.

The Math of Unredeemable Bags

With 6.1 WETH (~$23,000) in the pool, there is not enough liquidity for even a single top holder to exit their full position. needledger's displayed position of $126,000 would require $126,000 in buyers on the other side. The entire pool contained $23,000. These bags are not just underwater — they are structurally unredeemable at any meaningful size. The exit door was closed when the liquidity was pulled. The 30,000 holders just didn't know it yet.

Cycle 3 · 44 WETH Doesn't Cover Half of One Holder

By 10:18 PM the pool held 44.9947 WETH (~$81,000). 0xAvast alone shows $242,582 at -50.88%. The entire pool cannot cover half of one top holder's exit — and there are 6,645 others behind them. This is not illiquidity. This is a structural trap. The math was always impossible. The re-injection rebuilds the pool slowly — just enough to maintain price, not enough to provide meaningful exit liquidity.

Flag 2: The Hidden Code Problem

"Contract source not verified — code is hidden." This isn't a minor footnote. An unlocked LP with verified code is dangerous. An unlocked LP with hidden code is a black box with an open drain. The contract could contain: sell taxes that scale with position size, wallet blacklisting, maximum sell limits, automatic LP drain triggers, or functions that lock large wallets out of selling entirely — conditions that only activate under specific circumstances. Retail will never know until they hit them. The deployer knows exactly what levers exist. Nobody else does. We can see the WETH moving. We cannot see what else is moving with it.

July 17 · 10:18 PM · Cycle 3 building · $0.0525 · 6d 3h holders still in
FOMO app leaderboard 10:18 PM — heart: just zero my fomo already gang, DegenVcap: Listing on RH soon!
10:18 PM · Price $0.0525 · Pool 44.9 WETH · DegenVcap: "Listing on RH soon!" -20% · heart: "just zero my fomo already gang" -57.68%
"just zero my fomo already gang" — heart · $9,684 · -57.68% · 6 days 3 hours

Six days. Three hours. -57.68% on $9,684. Through the first drain. Through the re-injection. Through the second drain. Through the weekend rebuild. Still there at 10:18 PM with one sentence that contains more self-awareness than anything else on the leaderboard: "just zero my fomo already gang."

He knows. He knows it's FOMO. He knows it's not rational. He's asking the community to help him let go of something he doesn't have the tools to let go of himself. The tools he needed were on-chain. They existed on July 13th at 8:59 AM. Nobody put them in front of him.

Above him: DegenVcap — -20% on $10,218 — still posting "Listing on RH soon!" Manufacturing hope for the people beneath him. The trap has layers. The trapped become the trappers without knowing it. That's who RPD is built for. Not the sharp traders. Not the whales. heart. The person who knows something is wrong but doesn't have the variable that makes the equation solvable.


5b
The Chart Confession
WETH moving in and out. Price stuck in a range. That's not coincidence.

While WETH was being systematically drained and re-injected — movements of 80–100 ETH at a time — the DexScreener chart held a suspiciously stable range. The price didn't collapse when the LP hit 6.1 WETH. It didn't spike when 206.5 WETH was re-injected. It traded sideways. That stability under massive LP movement is not normal market behavior. It is price management.

DexScreener 4-hour chart for CASHCAT — pump and dump shape, range-bound trading during active LP drain
📊 DexScreener · CASHCAT/WETH · 4H Chart · July 17, 2026 · 5:37 PM UTC-7 · Liquidity: $3.2M · 14,679 buys vs 11,322 sells
Chart Analysis

Price Stuck. WETH Moving. That's the Tell.

A legitimate liquidity event — even a large one — moves the price. Adding 100 WETH to a pool should pump it. Removing 88 WETH should crash it. Neither happened here at the expected magnitude. The chart stayed range-bound through every LP movement because the price was being managed to keep the chart looking healthy while the extraction continued underneath.

Note the transaction feed: sells of $518, $124, $95 — retail exiting in small amounts. One buy of $36. The volume is retail noise. The real movement is happening at the LP level, invisible to anyone not running a scanner.

WETH LP moving in and out at this scale while the chart holds a range is not trading. It is theater. The chart is the curtain. RPD reads what's behind it.


5c
The Switch
One candle. Vertical. No buildup. That's not a trade — that's a switch being flipped.

The 4H chart hides the mechanics. The 5-minute chart shows them naked. When the re-injection hits, it doesn't look like organic buying pressure accumulating over time. It looks like a single vertical candle at exactly 16:00 — dwarfing everything around it — followed by retail FOMO chasing a move they didn't understand, then a slow bleed back down as the pool empties again. No buildup. No consolidation. No technical pattern. A switch.

DexScreener 5-minute chart for CASHCAT — vertical re-injection spike at 16:00, followed by retail chase and bleed
📊 DexScreener · CASHCAT/WETH · 5-Min Chart · July 17, 2026 · 6:13 PM UTC-7 · The 16:00 candle is the re-injection. One move. Mechanical. Timed.
5-Minute Forensics

Organic Pumps Have Stairs. This Has a Cliff.

Real buying pressure builds. You see a series of green candles, increasing volume, momentum. Traders enter progressively as confidence builds. The move takes time because humans take time.

The 16:00 candle is a cliff, not a staircase. One massive green bar. Then retail scrambles in — chasing, not leading. Then the slow grind down as the pool drains underneath the chart. The candle shape is the confession. It doesn't move like a trade. It moves like a transaction.

Meanwhile the right panel tells the full picture: 24,917 transactions. 14,019 buys vs 10,898 sells. 3,229 buyers. 2,874 sellers. $10.7M buy volume vs $10.4M sell volume. Retail is net buying. The pool is net draining. The math only works if someone is extracting from the LP side — not the trade side. Invisible to buyers. Visible to RPD.


6
The Smoking Gun: The Partial Re-Injection
6.1 WETH → 88.8 WETH. They put some back. Not all of it. Exactly enough.

Hours after the pool reached 6.1 WETH, the deployer re-injected liquidity. Not the full 94.6 WETH that was originally there. A calculated amount: 88.8 WETH. Enough to restore the chart. Enough to look like survival. Not enough to fully return what was taken.

RPD scan showing 88.8 WETH first re-injection
📡 Re-Injection #1 · 88.8 WETH
RPD scan showing 206.5 WETH second re-injection
📡 Re-Injection #2 · 206.5 WETH
RPD scan showing 118.3 WETH — second drain underway
🔴 Cycle 2 Drain · 118.3 WETH
RPD full scan — July 17 5:25 PM — 103.6 WETH — Score 8/100 — 2 flags still triggered
🔴 RPD Full Scan · July 17, 5:25 PM · 103.6 WETH · Score: 8/100 · 2 flags · LP 0.0% locked · Drain ongoing
🔴 Self-Funding Extraction Cycle — Confirmed

Pool refilled to 206.5 WETH — more than double the original. Second drain began immediately. 103.6 WETH remaining as of 5:25 PM scan. Over 100 WETH extracted in cycle 2 already. Risk score: 8/100. Same 2 flags. Score unchanged because the flags never changed. The deployer is running the identical playbook on a fresh wave of buyers who saw "recovery" and entered. LP still 0.0% locked. Contract still hidden. This is a confirmed, ongoing, self-funding extraction cycle.

⚠️ The Incriminating Detail

They Pulled Out a Calculator

A legitimate developer has exactly one reason to touch the liquidity pool — and it's locking it from the start. Every other action requires a story. Here is what each story looks like when examined:

"Technical issue / mistake" — You don't accidentally drain 88 ETH over four hours in a graduated progression. Mistakes are sudden. This was surgical.

"Rebalancing" — Rebalancing to what? 88 WETH instead of 94? You retain 6 ETH for "rebalancing?" That is not rebalancing. That is a withdrawal with a cover story.

"They panicked and put it back" — Then put it all back. Every wei. Lock it immediately. Issue a public statement. Anything less is resetting the trap, not correcting a mistake.

The partial re-injection is the most incriminating detail in the entire event. It is the signature of calculated intent. Enough liquidity to restore the price chart. Enough to look like survival. Not enough to fully return what was taken. The deployer retained approximately 6 WETH — roughly $23,000 — extracted from 30,000 retail holders.

The Multi-Phase Playbook — Documented
  • Phase 1

    Launch with no liquidity pool

    Hype builds. Community forms. FOMO app engagement grows. July 13, 8:59 AM — RPD fires first CRITICAL alert.
  • Phase 2

    Add liquidity pool — unlocked

    Trading begins. Price pumps. FOMO buyers flood in. RPD fires second alert 51 minutes later: "LP not locked. Can be pulled at any time."
  • Phase 3

    Pump to $240M market cap (Days 1–4)

    Community deepens conviction. Diamond hands culture activates. 30,000+ holders accumulate. Deployer quietly accumulates exit timing.
  • Phase 4

    Drain the pool gradually (July 17)

    94.6 → 69.8 → 8.4 → 6.1 WETH over hours. Price craters. Panic sellers dump bags at the bottom for nearly nothing.
  • Phase 5 ▶

    Re-inject partial liquidity — reset the trap

    6.1 → 88.8 WETH. Chart shows recovery. "It survived." New buyers enter. LP still 0.0% locked. Source still hidden. The door reopens.

7
The Verdict: What This Record Proves
Not theory. On-chain. Timestamped. Verifiable.
Forensic Summary

RPD Said It at 8:59 AM on July 13th

Before the liquidity pool existed. Before the pump. Before the losses. The engine read the contract, checked the on-chain state, and reported exactly what was there: a hidden contract, no locked liquidity, and a structural condition that enabled everything that followed.

Two Telegram alerts. Same morning. Same $10/month subscription. The second alert said, in plain language: "Lets the dev pull all the trading liquidity out instantly, crashing the price to zero." That sentence described — with precision — what happened four days later.

This is not prediction. RPD does not predict. This is reading what the contract says before the market figures it out. The multi-phase drain, the partial re-injection, the calculated extraction — none of it required insider knowledge. It required one scan. One morning. Ten dollars a month.

Legal Framework — What This Pattern Represents

In traditional markets, the documented behavior — graduated drain, coordinated refill to catch bounce buyers, second drain cycle — constitutes textbook market manipulation. In crypto, the DOJ and CFTC have successfully prosecuted this exact pattern under wire fraud (18 U.S.C. § 1343) and commodities manipulation statutes. The hidden source code strengthens the case for concealment with intent. The graduated drain schedule — not accidental, not sudden — demonstrates premeditation. The partial re-injection demonstrates a second act of calculated extraction.

RPD's timestamped forensic record — from the 8:59 AM first alert through every liquidity data point — is precisely the kind of sequential evidence a prosecutor, the CFTC, or a congressional hearing would require to establish the timeline of a manipulation event.


8
Key Takeaways for Every Trader
01
The Score Is a Summary — The Flags Are the Story
The score dropped from 70 to 10.4 when liquidity appeared. The risk didn't drop — the LP was unlocked from the first second. Never stop at the headline number. Read every flag.
02
New Chains = Coverage Gap = Your Blind Spot
Most scanners returned nothing for Robinhood Chain. "Not flagged" doesn't mean clean — it may mean the scanner didn't support the chain. Chain coverage is not a feature; it's the product.
03
0% LP Lock Means the Floor Can Disappear Without Warning
Across every confirmed rugpull in RPD's case library, 0% LP lock is present in 100% of cases. When you see it, treat it as binary: the floor is at risk. Not "maybe at risk." At risk.
04
A Partial Re-Injection Is Not Recovery — It's Phase Two
When a deployer drains and then partially refills a pool, they are resetting the trap — not correcting a mistake. If the intent were honest, the LP would be locked. Ask: why not all of it? Why not locked?
05
Community Conviction Is a Vulnerability, Not Protection
The degen culture — diamond hands, conviction, honor of holding through pain — was weaponized here. The stronger the community belief, the longer the deployer had to drain. Social proof is not on-chain proof.
06
Hidden Code on a New Chain Is the Highest-Risk Combination
On newer chains, bytecode analysis tools are less mature. An unverified contract is nearly opaque. Hiding source code is not an oversight — it is a deliberate choice about who gets to read the rules.
07
Wide Holder Distribution Doesn't Protect the Exit Floor
$CASHCAT had 30,000+ holders and 9.9% top-10 concentration — better than most blue chips by that metric. None of it protected the LP. Distribution is healthy. An unlocked LP makes every holder equally vulnerable.
08
$10/Month Was the Difference Between Knowing and Not Knowing
Two alerts. One morning. Before the first dollar was lost. That is the product. Not prediction — reading what the contract already says, faster than the market figures it out.

Important Notice: This case study is provided for educational and forensic documentation purposes only. The data presented reflects RPD's automated on-chain scans at the timestamps noted. Rugpull Defender makes no claim that any specific individual has committed fraud — structural flags reflect on-chain conditions that create risk, not confirmed intent. This is not financial or legal advice. All on-chain data is publicly verifiable. Always conduct independent research before trading any crypto asset.

The mission is not to catch scammers. It's to change the mindset of the people who fund them.

🛡️ Don't Be the Next CASHCAT Story

$CASHCAT was flagged at 8:59 AM on July 13th. Before the pump. Before the losses. Before the drain.

Run the same analysis on any token across 10+ chains. The data is on-chain. We just read it before the market does.

🛡️ Scan Any Token Free → 📡 See Live CASHCAT Data →
All case studies and token watch reports are provided for educational purposes only. Not financial or investment advice. Always conduct independent research before trading any crypto asset.
© 2026 Rugpull Defender LLC · Mesa, Arizona