Memecoin slang decoded: cabal, CTO, bundled, bonded and dev sold

Fourteen memecoin terms, each tied to the on-chain event it describes and to the way you can check it yourself on a block explorer or a holder map, sourced from launchpad documentation and on-chain research.

Published: 6 November 2026

What does cabal mean in crypto?

A cabal is a suspected group of insiders who coordinate around a token. They buy it early, often through several wallets, promote it through accounts they run or pay, and sell into the buyers that promotion brings in. Decrypt, explaining the word in August 2024, described it as insiders who collaborate to promote specific tokens, which is the everyday sense of a secret faction applied to a chart.

The word is mostly an accusation: "cabal coin" means the poster thinks insiders control the supply. It is also a joke and an excuse, and the next two sections separate what has been documented from what is only suspected.

On-chain, a cabal looks like wallets funded from a common source that buy the same launches at the same moment and sell together. A holder map makes this visible. Bubblemaps, one such tool, draws a token's top 250 holders as bubbles sized by their holdings and links two bubbles when the wallets have transferred funds to each other. Its own documentation frames a cluster as a question: an employer paying staff, an investor receiving tokens, or someone covering their tracks. A cluster is a lead, not a verdict.

The real part: what has been documented

• Launch groups. In March 2025 Bloomberg reported, as summarized by CryptoSlate, that Solana had become a breeding ground for groups that specialize in memecoin launches. They allegedly connect creators with influencers, give KOLs large allocations or deeply discounted buys in exchange for promotion, and profit from short-term spikes before the tokens lose value. These claims come from market participants and analysts quoted in the report, not from a regulator's finding.
• Shared funding on-chain. Chainalysis found that about 94% of the pools tied to suspected pump-and-dump tokens launched in 2024 appeared to be drained by the address that created them, and that in some cases the creator and the draining address were funded by the same source, which it says may point to coordination. Its methods track behavior, not intent.
• A token called CABAL. In August 2024 a token named CABAL, created on Pump.fun, airdropped 20% of its supply to ten crypto influencers and called it a social experiment. Most sold straight away. Two days later three still held, and its market value had fallen from a peak of $848,000 to $164,000, Decrypt reported.

The common thread is that coordination leaves traces: early wallets funded from the same place, allocations to promoters, and sales that land right after the hype. Those insiders need buyers, which is what traders mean by exit liquidity.

The imagined part: when cabal is cope

Because some groups are real, every dump can be blamed on one, and that claim can never be disproved. A useful rule: if someone says "cabal" without pointing to wallets, funding links or disclosed allocations, they are describing a feeling. Prices also fall because ordinary holders sell. When you do have evidence, describe the behavior ("the top wallets were funded by the deployer") rather than inventing a shadowy group, and never pin it on a named person without a regulator's or a court's finding.

The word itself is older than crypto: it comes from French cabale and medieval Latin cabbala, from the Hebrew word that also gives Kabbalah (Wiktionary). It carries baggage too. The Anti-Defamation League says the QAnon belief in a global "cabal" has roots in the antisemitic blood libel trope, which is one more reason to name the behavior you can show rather than the word.

The rest of this page does the same for the whole memecoin vocabulary: what each word claims happened, and where to look. For the place where these words are spoken, see what the trenches mean in crypto.

Memecoin slang decoded: the term, the event, the check

Most memecoin slang names something that either happened on-chain or did not. That makes it checkable, which is more than can be said for most slang.

Several of those checks lean on trading terminals. Axiom's documentation, for example, lists dev holding, top 10 holders, snipers, insiders and bundle shares as filters on its new-token feed. The figures are computed by the tool, so the explorer is where you confirm them.

What does bonding curve mean?

A bonding curve is the pricing formula a launchpad uses before a token has a real market. Pump.fun's documentation describes its curve as a constant-product market maker, the same math as Uniswap: two virtual reserves, one of SOL and one of the token, multiplied together into a constant. Every buy moves the price up, every sell moves it down, and large trades pay a worse average price than small ones.

A toy example with round numbers, not Pump.fun's real reserves: a curve holds 100 SOL and 1,000,000 tokens, so a token costs 0.0001 SOL. A buyer sends 10 SOL. To keep the product constant, the curve releases 90,909 tokens, at an average of 0.00011 SOL each, and the next token now costs 0.000121 SOL, 21% more than before the trade. The first buyers get the most tokens per SOL, which is why the first block is crowded.

Each trade on Pump.fun's curve carries a 1.25% fee, 0.30% to the token's creator and 0.95% to the platform, according to its fee page as last updated in October 2026. Creating a token costs nothing.

What does bonded mean in crypto?

A token has bonded when it completes its curve. Pump.fun's documentation says that once a token's market value on the curve reaches the graduation threshold, the curve closes and the whole liquidity pool migrates in one step to PumpSwap, its own exchange; graduation is automatic and irreversible, and the resulting pool is owned by the protocol. The fee page lists a one-time graduation fee of 0.015 SOL. "Graduated" and "migrated" mean the same thing.

The threshold is reached in SOL, so its dollar value moves with the SOL price. The Block put it at about $69,000 of market value in March 2025, when tokens still migrated to Raydium for a 6 SOL fee; crypto.news gave it as about 85 SOL of purchases in 2026. Raydium's own launchpad, LaunchLab, also graduates tokens at 85 SOL.

Few tokens get there. About 1.4% of Pump.fun tokens had reached Raydium by August 2024 (The Block), the weekly rate stayed below 1% for four weeks from February 17, 2025 (Cointelegraph), and crypto.news puts the overall rate under 2%. Terminals follow the same path in columns: Axiom's feed sorts tokens into new pairs, a "final stretch" for curves close to completion, and migrated.

Bonding is a milestone, not an endorsement. The curve completes once enough SOL has gone in, whoever sent it, and that includes bundles and snipers.

What does bundled mean in crypto?

A bundled token is one whose supply was bought at launch through many wallets controlled by one party, usually the creator. Decrypt, reporting Bubblemaps' analysis of a celebrity-promoted token in October 2024, explained bundling as a tool that creates multiple wallets to buy the same token, so that many small holders appear where one party controls a large share. In that case Bubblemaps found 60% of the supply bundled at launch and $500,000 already sold within 12 hours.

The mechanics are ordinary Solana tools used for a misleading purpose. Jito's documentation describes a bundle as up to five transactions that execute in order, in the same slot, all or nothing, with a tip to win a place. Creation and several buys can land together before anyone else can react, and crypto.news describes creators buying large allocations in the same transaction or block as the launch.

How to check: open the token on a block explorer, find the creation transaction, and list the wallets that bought in that slot. Fresh wallets with no history, funded from the same address minutes earlier, are the signature. A holder map will often show them as one cluster.

What is a sniper in crypto?

A sniper buys in the first block or the first seconds of a launch, almost always with a bot, and sells within minutes. There are two kinds. Independent snipers race everyone else for the cheapest tokens. Creator-funded snipers are the creator in disguise: Solidus Labs describes deployer-funded, same-block sniping as a pattern specific to Pump.fun.

Pine Analytics measured both in April 2025. More than half of new Pump.fun tokens were sniped in the very block that created them. In the subset where the creator had sent SOL to the sniping wallet beforehand, more than 4,600 sniper wallets working with more than 10,400 creators took over 15,000 SOL of profit in a month. 87% of those snipes were profitable, and more than 55% were fully sold in under a minute.

How to check: compare a wallet's first buy with the token's creation transaction, then look at where the wallet's SOL came from. A transfer from the creator shortly before the launch settles the question.

What does dev sold mean?

"Dev" is the token's creator, and "dev sold" means the creator's address has sold its tokens. Newcomers read it as a warning. Many memecoin traders read it the other way: Decrypt reported in January 2025 that memecoin traders dislike a creator who still holds a large share, so "a dev dumping is, ironically, bullish". A creator with a big position is a sale waiting to happen; a creator at zero has nothing left to sell.

Some creators sell as a business. The same Decrypt report followed one wallet that launched 17,794 tokens in three months and made more than $840,000, mostly by buying its own tokens at launch and selling within seconds.

The catch is that "the dev" is an address, not a person. Researchers who studied all 15 million coins launched on Pump.fun over two years found hiding the creator's addresses among five recurring manipulation strategies (Szwajcok and co-authors, 2026). So check the creator's address and the wallets it funded: a dev that "sold" can still hold through others.

What does CTO mean in crypto?

CTO stands for community takeover. CoinMarketCap's glossary defines it as the moment the original creators of a project abandon it and its holders take over its development and direction. Its example: in July 2024, a Solana memecoin launched on Pump.fun went through a takeover after its developer sold everything shortly after launch. Holders took over its social accounts, and the token went on to pass $100 million of market value.

Takeovers have their own infrastructure. DEX Screener, the price-tracking site, lists Community Takeover among the three products it sells, says unapproved takeover orders are not refunded, and lists takeovers in its public API, each with a claim date and the new icon, header, description and links.

What a CTO does not change is the supply. The contract, the holder list and any insider wallets stay exactly as they were, so check the holder map before reading a takeover as a fresh start.

How to check one: open the creator's address (an abandoned token usually shows a zero balance and no activity), look for the takeover claim and its claim date on DEX Screener, then open the holder map. If the top wallets are the same insiders as before the claim date, the takeover changed the face of the token, not who holds it.

What is a KOL in crypto?

KOL stands for key opinion leader (more in KOL meaning), a marketing term for influencers hired in a niche market, as a 2024 CoinDesk column put it, adding that tokens are often handed to KOLs as incentives. In memecoin slang a KOL is any account big enough to move a price by posting a ticker. Arkham, a blockchain analytics firm, added a tag in March 2025 that tracks the wallets of X accounts with more than 100,000 followers, more than 950 addresses as of March 8, 2025 (The Block).

The on-chain question is order. Did the account's wallet receive tokens from the creator before the post, buy minutes before it, or sell into it? Undisclosed paid promotion is a legal matter in many places (the rules finfluencers have to follow), and the business model behind it is in how crypto influencers make money.

Rug and soft rug: what is the difference?

A rug, or rug pull, leaves holders with tokens they cannot sell at any useful price. Chainalysis uses a strict test: an address that added liquidity to a pool and later removed at least 65% of it, worth $1,000 or more, from a pool that had gained traction and then went quiet. About 94% of the pools tied to suspected pump-and-dump tokens launched in 2024 appeared to be rugged by the address that created them.

On a launchpad, the creator cannot pull a pool that the protocol owns, so the rug is a sale: insiders buy cheaply at the bottom of the curve and sell into later buyers, as crypto.news describes it. A soft rug is the slow version. Cointelegraph described it in 2021 as founders dumping their own tokens and leaving, rather than taking users' assets, and Ledger's glossary stresses that it is gradual. Solidus Labs found soft-rug characteristics in about 93% of 388,000 Raydium pools.

How to check a memecoin's slang yourself

Seven steps, in the order that saves the most time. None of them says anything about where the price goes next; they only test the story being told about the token.

1. Get the contract address (the CA) from the launchpad page, never from a reply or a direct message. Copycat coins with the same name are another of the five strategies in the Pump.fun study above.
2. Open it on a block explorer (Solscan, for a Solana token) and find the creation transaction. Its signer is the creator.
3. Read the holders. Note the top 10 share, leaving out the curve or pool account, and the creator's balance.
4. Read the first block. Which wallets bought in the creation slot, and were they funded by the creator or by one shared address?
5. Open a holder map. Look for clusters among the top holders and for links back to the creator.
6. Read the creator's history. An address that has launched hundreds of tokens is running a process, not a project.
7. Line up posts and trades. When a large account posts the ticker, check what its known wallets did before and after.

The one claim with no on-chain event: a screenshot

Every term above points to a transaction. The memecoin win posted as an image does not: a profit card or a wallet total can be cropped, selected or composed, and it carries no address to check. Five tells in a wallet screenshot lists what gives a composed one away, and the on-chain count of memecoin millionaires shows how rare the real ones are.

Composed screens have honest uses too, in skits and explainers about this culture. My Larp Wallet is a crypto wallet app simulator for that: every amount is typed in, nothing is held, and our terms of use prohibit presenting a screen as a real balance. A visible Mockup label belongs in every clip. For the rest of the vocabulary, from gm to PvP, see the Crypto Twitter slang glossary.

Sources

• Pump.fun, The Pump.fun bonding curve, 2026
• Pump.fun, Fees, 2026
• Jito Labs, Low latency transaction send (bundles), 2026
• Bubblemaps, How does it work?, 2026
• Axiom, Pulse (documentation), 2026
• Solidus Labs, The 2025 Rug Pull Report: rug pulls and pump-and-dumps on Solana, 2025
• Chainalysis, Crypto market manipulation 2025: suspected wash trading, pump and dump schemes, 2025
• Pine Analytics, Exit Liquidity Machines, 2025
• Decrypt, Meme coin airdrops $10,000 worth of tokens to crypto influencers, most instantly sell, 2024
• Decrypt, This crypto trader bagged $840K by creating 17,000 meme coins in 3 months, 2025
• Decrypt, report on insiders profiting from a celebrity-themed Solana meme coin within 12 hours, 2024
• CoinMarketCap Academy, Community Takeover (CTO), 2024
• CryptoSlate, Solana has become a breeding ground for pump and dump memecoin cabals: Bloomberg, 2025
• Anti-Defamation League, Cabal (glossary), 2026
• Wiktionary, cabal, 2026
• Wikipedia, Cabal, 2026

Questions

What does cabal mean in crypto?

A cabal is a suspected group of insiders who coordinate around a token: they buy early, often across several wallets, promote it and sell into the demand. Decrypt described the word in 2024 as insiders who collaborate to promote specific tokens. A holder map can show wallets linked by transfers, but a link can also be an employer or an investor, so it is a lead to follow, not a verdict.

Is cabal an offensive word?

Not by itself, but it has a history. Wikipedia notes it is sometimes used as an antisemitic dog whistle, and the Anti-Defamation League says the QAnon belief in a global cabal has roots in the antisemitic blood libel trope. In crypto the word is usually a loose accusation, so naming the behavior you can show, such as insiders or a launch group, is clearer and safer.

Where does the word cabal come from?

From French cabale, from medieval Latin cabbala, from the Hebrew word that also gives Kabbalah, according to Wiktionary. The popular story that it began as an acronym of five ministers of Charles II in 1668 is a folk etymology, though Wikipedia notes that the coincidence was observed at the time.

What does CTO mean in crypto?

CTO stands for community takeover: the creator of a token abandons it, usually after selling, and holders take over its social accounts and its listing information. DEX Screener sells a Community Takeover order for that purpose, subject to approval. A CTO changes who runs the account, not who holds the supply.

What does bundled mean in crypto?

A bundled token is one whose creator, or a group around the creator, bought a large share of supply at launch through many wallets, so the holder list looks spread out when one party controls it. On Solana the buys can land in the creation block through a Jito bundle of up to five transactions. Check the wallets that bought in the first block and where their funds came from.

What does bonded mean in crypto?

A token has bonded (or graduated, or migrated) when it completes its launchpad bonding curve and its liquidity moves into an ordinary exchange pool. On Pump.fun that pool is on PumpSwap and is owned by the protocol. Fewer than 2% of Pump.fun tokens ever bond, but bonding only means enough SOL went in, whoever sent it.

What does dev sold mean?

It means the wallet that created the token has sold its tokens. Newcomers read it as a warning, while many memecoin traders read an early dev sale as good news, because a creator who still holds a large share can dump it later. Either way, check the wallets the creator funded, since one person can sell through several addresses.