Data Analysis Ties MYX Finance's September Rally to a Four-Part Manipulation Scheme

A joint investigation by Rena Labs and Insider.Cash reviewed 9,200 minute-by-minute trading data points across four market dimensions and concluded there was less than a 0.001% probability that MYX Finance's September price surge occurred organically. The token had reached an all-time high of $19.03, and the analysis identified 249 statistical anomalies behind that move. Separately, blockchain investigators traced 100 newly created wallets that claimed a combined $170 million through what appears to be one of the largest airdrop Sybil attacks on record, alongside estimates of $6–9 billion in potentially fabricated daily trading volume and engineered short squeezes that liquidated $73 million in retail positions. MYX briefly ranked among the top 35 cryptocurrencies by market capitalization before falling roughly 52% to around $9. When confronted with the statistical findings, MYX Finance did not dispute them — it defended the practices behind them.

How the anomalies were identified

The Rena Labs/Insider.Cash analysis flagged patterns that don't occur in organic markets: liquidity spikes of 433% on the Gate exchange, trade sizes that contracted 67% during periods of peak illiquidity, and bid-ask spreads that narrowed rather than widened when liquidity was thinnest — the opposite of what would normally happen. Taken together, the researchers argued, these were not simple inefficiencies but signatures of coordinated manipulation precise enough to leave a measurable statistical trail. The question that followed was how that pattern translated into an estimated $170 million payout.

Vector one: the airdrop

Bubblemaps traced what it described as one of crypto's largest Sybil attacks: a single entity operating 100 wallets that collected 9.8 million MYX tokens worth roughly $170 million. Every wallet followed an identical pattern — funded via OKX on April 19 at 6:50 AM with matching BNB balances, then claiming tokens in near-perfect synchronization on May 7 at 5:30 AM. None of the wallets showed prior on-chain activity or any apparent purpose beyond capturing airdrop rewards.

Vector two: inflated volume

Reported daily perpetuals volume reached $6–9 billion — several multiples of MYX's entire market capitalization, a ratio inconsistent with genuine market activity. Investigators pointed to synchronized trading patterns across Binance, PancakeSwap, and Bitget, with small trades consistently routing back into the same central wallets — a structure more consistent with automated wash trading than dispersed retail activity.

Vector three: engineered short squeezes

Once spot price crossed $3.69, a cascade began that liquidated $73 million in short positions over 48 hours, with up to 50x leverage available to amplify the damage. Binance's hourly funding-rate settlements on MYX perpetuals added to the pressure, raising costs for short sellers more frequently and creating repeated opportunities to force liquidations, which in turn triggered forced buybacks that pushed the price higher still. The single worst day, September 8, accounted for $42 million of the $73 million in shorts liquidated across that 48-hour window.

Vector four: the exit

The timing of MYX's token unlock lined up closely with the peak of demand: 39 million tokens — about 3.9% of total supply — were released into the market right as retail buying was at its height. Hack VC moved quickly, transferring 835,000 MYX tokens to MEXC, positioned to sell into the buying pressure it had helped generate.

MYX Finance's response

Rather than deny the findings, MYX Finance's September 9 statement effectively confirmed them. The project wrote that "apart from the Cambrian campaign, where anti-sybil measures were applied, all other campaign rewards have been strictly based on users' genuine trading volume and LP contributions, without any additional restrictions" — an acknowledgment that Sybil safeguards were absent everywhere except that one campaign. The statement continued: "Prior to launch, some users requested to change their addresses, including a number of high-volume participants... From the perspective of focusing on trading itself, we did not impose specific prohibitions on such requests" — language that recast the 100 coordinated wallets claiming $170 million as routine address changes. The statement went further still: "Even in cases where a single entity participates extensively, we acknowledge and respect that participation," which amounted to an admission that a single actor was allowed to claim roughly 1% of the total token supply through the coordinated wallet scheme. Bubblemaps was not satisfied, calling the explanation "a long, vague GPT-reply" and pressing unsuccessfully for details on wallet coordination and any connections to the MYX team.

Valuation mismatch

At its peak, MYX carried a fully diluted valuation above $17 billion. By comparison, Hyperliquid — the largest decentralized perpetuals platform — sits at a similar valuation but backs it with $712 million in TVL and $12.8 billion in open interest. MYX, by contrast, had roughly $55 million in TVL and $5 million in open interest. The rally also wasn't accompanied by a comparable rise in social engagement or organic community growth, suggesting the price action was driven by traders rather than genuine adoption. With 80% of supply locked and only about 197 million tokens actually circulating, the low float gave whoever controlled the remaining supply outsized influence over price. Technical indicators reinforced the picture: RSI reportedly hit 98.06, an extreme overbought reading, while Gate exchange logged 32 separate liquidity anomalies within 48 hours. None of it deterred retail buyers.

The unwind

MYX peaked at $19.03 on September 11; two weeks later it was trading around $9, a roughly 52% decline that erased a substantial amount of paper value. The pattern mirrored an earlier rehearsal in August — a sharp pump followed by an equally sharp drop. Trading volume fell in step with price as the wash-trading activity apparently stopped once the extraction phase was complete. Platform fundamentals — $55 million TVL and $5 million open interest against a claimed $17.7 billion valuation — never supported the price it had reached. Some analysts who had flagged the manipulation early took short positions near the peak, while many retail traders continued buying the decline as it continued lower. Scrutiny of MYX's wallet network and airdrop distribution intensified as the price fell, with each new detail reinforcing the conclusion that the rally had been engineered rather than organic.

Summary

Across four coordinated mechanisms — a Sybil-driven airdrop claim, inflated trading volume, engineered short squeezes, and a well-timed token unlock — MYX Finance is estimated to have extracted around $170 million via what researchers describe as the largest airdrop Sybil attack documented in crypto to date, with retail traders effectively supplying the exit liquidity. Rather than deny the underlying facts once they were mathematically demonstrated, the project characterized them as acceptable practice. MYX now trades near $9, down about 52% from its $19.03 high, with the on-chain record of the scheme remaining publicly visible.