A Twitter user openly confessed to executing a cryptocurrency rug pull, pocketing $30,000 in two hours, and announced plans to move to New York City — then got systematically exposed by security researchers who identified multiple identity-leaking vulnerabilities in their digital footprint. The @TwinkBukowski account created “WBE Coin” on Solana‘s pump.fun platform, where 98.6% of tokens exhibit rug pull characteristics. Few scammers are brazen enough to confess publicly — and fewer still survive the forensic scrutiny that follows.
The Anatomy of a Public Crypto Rug Pull Confession
The @TwinkBukowski account (“Worst Boyfriend Ever”) launched WBE Coin on pump.fun, Solana’s dominant memecoin launchpad where anyone can deploy a token in minutes for under $2. The user then posted an unambiguous admission:
“Rugpulled. Made $30,000 in 2 hours. Hope it was mostly twitter crypto nerds who bought and not people who read my blog. Taking the money and moving to New York City. See you there.”
The token’s contract address begins with 9U3b...pump. At the time of the confession, market cap had collapsed to $4,400 after reaching an all-time high of just $4,700 — a characteristic post-dump crater.
In a twist common to viral rug pull dramas, the token has since been “CTO’d” (Community TakeOver). Speculators pumped it to approximately $669K market cap with $4.7 million in 24-hour volume. The original scammer likely no longer benefits from this revival.
Security Researcher Exposes Critical OPSEC Failures
Security researcher @beausecurity responded by cataloging the scammer’s operational security failures — and tagging the FBI directly.
The vulnerabilities identified:
- Weak X location settings — exposing geographic data
- Paid Twitter Blue checkmark — X/Twitter has their credit card on file
- Location mismatch — account claims Philippines, but connected via US App Store
- Six username changes — last change in June 2025, creating a traceable history
- Verified since July 2024 — extended identity trail
As @beausecurity noted: “If you’re going to Rug Pull a token and announce that you did, you probably shouldn’t have weak X location settings, pay for a blue check (they have your credit card lmao), or very obviously use a VPN to be in the ‘Philippines.’ @FBI this one’s on a platter for you.”
How the $30,000 Profit Math Actually Works
The apparent contradiction between a $30,000 profit claim and a $4,400 market cap confuses many observers. But pump.fun’s bonding curve mechanics make this entirely plausible.
Market cap after a rug pull represents the devastated remains — not the extraction point.
Pump.fun operates on an exponential bonding curve where early buyers acquire tokens at fractions of a cent. Creators who “snipe” their own launches using bundle bots can hold 20-30% of supply through multiple wallets. As buyers pile in, prices rise exponentially. A token pumping to $100K-$200K market cap allows significant extraction before the inevitable crash.
The mechanics match the infamous “Gen Z Quant” incident from November 2024, where a 13-year-old invested $350, watched his token pump past $1 million market cap, sold for $30,000, and left holders with worthless tokens. The teen bragged on livestream: “Thanks for the twenty bandos!”
The Legal Exposure of Confessing to a Crypto Rug Pull
Openly admitting to a rug pull on social media creates substantial legal jeopardy. Wire fraud (18 U.S.C. § 1343) — the primary statute in crypto fraud prosecutions — carries no minimum dollar threshold and penalties up to 20 years imprisonment.
The DOJ has successfully prosecuted multiple rug pulls at similar or smaller amounts:
- Mutant Ape Planet (2023): Aurelien Michel pled guilty after his Discord message admitting “We never intended to rug but the community went way too toxic” was cited in the federal complaint. He faces up to 5 years and forfeited $1.4 million.
- Frosties NFT (2022): Two 20-year-olds arrested for $1.1 million in wire fraud conspiracy. FBI traced funds despite Tornado Cash mixer attempts.
- $22M NFT Scheme (2024): Gabriel Hay and Gavin Mayo arrested, now facing 20+ years.
For @TwinkBukowski, the risk factors compound:
- Public confession — direct evidence of intent
- FBI notification — by a security researcher with documented evidence
- Identifiable payment trail — Twitter Blue verification requires credit card
- Stated destination — “moving to New York City” places them in federal jurisdiction (SDNY/EDNY actively prosecute crypto cases)
Pump.fun’s Epidemic: 98.6% of Tokens Are Scams
The WBE Coin incident is unremarkable by pump.fun standards. Solidus Labs analysis found that of over 7 million tokens deployed on the platform, 98.6% exhibited rug pull or pump-and-dump characteristics. Only 97,000 tokens (1.4%) maintained liquidity above $1,000.
Key statistics:
- Average memecoin lifespan: 12 days
- Daily new tokens: ~10,417
- Tokens defunct within 24 hours: 9,912 (95%)
- Largest single rug pull: MToken at $1.9 million
Pump.fun now faces a $5.5 billion RICO class action lawsuit (Aguilar v. Baton Corp., SDNY) alleging the platform operates as an “unlicensed casino.” The suit names pump.fun alongside Solana Labs and Jito Labs, claiming 5,000 internal messages prove coordinated manipulation.
How Security Researchers Trace Crypto Scammers
The @beausecurity callout follows methodologies proven effective in high-profile cases. On-chain investigator ZachXBT has recovered approximately $435 million in stolen cryptocurrency through similar techniques.
Common OPSEC failures that lead to identification:
- Social media flexing — The “Gen Z Quant” teen got doxxed after flaunting profits; community “revenge pumped” the token to $80M market cap without him
- Device metadata — Screenshots revealing “Harvi’s MacBook Air” exposed one scammer
- Consistent usernames — Cross-platform tracing enables identity correlation
- Payment verification — Twitter Blue, exchange KYC, and app store purchases create trails
Twitter Blue verification presents particular vulnerability. The $8/month subscription requires credit card payment, creating an identity link that law enforcement can subpoena. Combined with location data and App Store connection information, a trail emerges even for users attempting anonymity.
Why Crypto Rug Pull Scammers Keep Confessing Anyway
The @TwinkBukowski admission fits a psychological pattern: pump.fun has normalized rug pulls to such an extent that perpetrators treat them as content rather than crimes.
The Gen Z Quant teen livestreamed his dump and thanked victims on camera. A terminally ill developer announced “I have 120 hours to live” before rugging. Multiple creators have joked about “rugging” while bonding curves are still active.
This normalization collides with reality when federal prosecutors take interest. The FBI received 41,557 cryptocurrency investment scam complaints in 2024, totaling $5.7 billion in reported losses. Cases featuring public confessions and viral attention become attractive “teachable moment” prosecutions.
Whether law enforcement pursues the WBE Coin case depends on victim complaints filed with the FBI’s IC3, media attention, and prosecutorial priorities. But the evidence trail has been publicly established — and the scammer helpfully announced their destination.
Bottom Line
The WBE Coin rug pull exemplifies the contradictions of the current memecoin ecosystem. A platform where 98.6% of tokens are scams has generated $850 million in fees while facing RICO allegations. Users openly confess to fraud while security researchers document their failures in real-time. Federal prosecutors have secured convictions using Discord messages as evidence, yet new scammers emerge daily believing they’ll escape consequences.
The $30,000 profit claim is mechanically plausible. The legal exposure is real and precedented. And the OPSEC failures identified by @beausecurity represent exactly the kind of digital trail that has led to arrests in comparable cases.
Whether @TwinkBukowski joins Aurelien Michel and the Frosties defendants as a prosecuted example depends on factors outside their control — but they’ve certainly supplied the evidence.
Reported by BlokchainFeed's research team — crypto journalists and market analysts with 50+ years combined experience covering blockchain and digital assets.
Meet Blok →