atomic-audit

Detects whether a Solana wallet was seeded by pump.fun via transaction history analysis.

15|2|Updated May 19, 2026
One-click install
npx skills add https://github.com/nirholas/atomic --skill atomic-audit-nirholas
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: atomic-audit
Source: https://github.com/nirholas/atomic/tree/main/skills/audit
Command: npx skills add https://github.com/nirholas/atomic --skill atomic-audit-nirholas

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires tsx, @solana/web3.js.

What problem does it solve? It answers the provenance question of whether a Solana wallet's first incoming SOL transfer originated from a pump.fun-controlled address, which is essential for forensics, anti-Sybil filtering, and funding lineage audits. ## Core Features & Use Cases - Funding Source Detection: Walks a wallet's transaction history to identify its first incoming SOL transfer and checks whether the sender is a pump.fun-controlled address. - Color-Coded CLI Output: Returns GREEN when pump.fun seeded the wallet and RED when it did not or the source is unknown. - Programmatic API: Exposes the detectSeededByPump function from src/lib/funding-source.ts for integration into larger tooling. - Use Case: Before running a rewards airdrop, batch-check candidate wallets and exclude those seeded by pump.fun, since they are often fresh wallets controlled by the same actor. ## Quick Start Ask the assistant to check whether a given Solana wallet address was seeded by pump.fun using the check-pump-funding tool.

Frequently Asked Questions about atomic-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if a Solana wallet was funded by pump.fun?▼

Run npx tsx tools/check-pump-funding.ts <walletAddress> from the repo root. The tool walks the wallet's transaction history to find its first incoming SOL transfer and prints GREEN if the sender is a pump.fun-controlled address, RED otherwise.

How to detect pump.fun seeded wallets programmatically?▼

Import detectSeededByPump from src/lib/funding-source.ts and pass a Connection and the wallet public key. The returned result includes the originating transaction and source address when the check is positive.

Does the pump.fun funding check work with the default Solana RPC?▼

It works but rate-limits quickly because the tool walks full transaction history. For batch checks, use a paid RPC such as Helius or Triton via the RPC_URL environment variable or the positional rpcUrl argument.

Why does the funding check return RED for a wallet pump.fun actually seeded?▼

RED means not confirmed, not definitely negative. Old funding signatures may be pruned from default RPCs, the original funder account may be closed, or the wallet was funded indirectly through a hop wallet, which this direct-only check does not trace.

Is the wallet provenance tool safe to run on any address?▼

Yes, it is fully read-only. It requires no private keys, performs no signing, and only queries public on-chain data, so it is safe to run against any public Solana address.