- Event
- First reported
- Last checked
- · reviewed
About this date
22 October UTC per reporting. The token's PumpSwap pool was created 19:49:38 UTC that day (S11). The exact times of the repost and its removal are not known.
Summary
crypto.news and Protos report that Kimchi's X account posted an image with a QR code linking to a new Pump.fun token, that Alon reposted it, and that the post and repost were later removed. Protos adds that Kimchi's account then deleted Pump.fun-related posts and removed the platform from its bio.
What the sources support
Three news reports from separate origins. None of them says it inspected the deleted posts before removal.
- That the repost and its removal were widely reported by multiple outlets.
What remains unresolved
- Why Alon reposted, and why he removed it. No explanation from him or Pump.fun was located (see R-B10).
- Whether Kimchi's account was compromised (see R-B07).
- Trader Arez's allegation, reported by crypto.news, that the QR code's destination changed. UNREPOST has not seen the original.
Limits of this receipt
- UNREPOST has not inspected the deleted original posts. Screenshots attached by other authors do not authenticate them.
- The deleted QR-code post and removed repost are pictured only inside other authors' posts, now captured directly from x.com. Their origin and editing before republication remain unverified.
- A repost and its removal do not by themselves show coordination, intent, wallet ownership or profit.
The screenshots

Refund demand, with the attached “project kimchi” poster image
Redacted view · Change in Settings
A public refund demand, inspected directly on x.com. Its attached poster image is another author's screenshot, not Kimchi's deleted original. Direct x.com screenshot.
- Source
- S40 x.com
- Post date shown
- 4:54 AM · Oct 23, 2026
- Screenshot taken
Edits & limits
What UNREPOST changed:
- Cropped to the target post, preserving its text, visible attachments and date/time line; unrelated replies, side panels and lower reply-filter controls omitted.
- QR codes covered with visible labelled boxes so they cannot be scanned.
- Photographs of people, including portrait avatars where present, covered with visible labelled boxes.
- Provenance strips give x.com, capture UTC, sign-in state, displayed date/time and the meaning of each redaction label.
Limits:
- A screenshot records what X displayed at capture time, not whether the author's claims are true.
- A current screenshot does not authenticate earlier edits, deleted originals or screenshots attached by another author.
- The post's characterisation (“rug pull”, “scam”) is the author's allegation, not a finding.
- The attached image's origin and editing are not known to UNREPOST.

Lookonchain post on the Project Kimchi peak and decline (linked from crypto.news)
Redacted view · Change in Settings
Lookonchain's account of the repost, the undo and the price collapse, with its transfer tables. 4 separately captured carousel views are labelled and joined vertically.
- Source
- S47 x.com
- Post date shown
- 3:07 PM · Oct 23, 2026
- Screenshot taken
Edits & limits
What UNREPOST changed:
- Cropped to the target post, preserving its text, visible attachments and date/time line; unrelated replies, side panels and lower reply-filter controls omitted.
- 4 separate normal-browser carousel views are labelled Part N of K and joined vertically without resizing; the result is not presented as one continuous screenshot.
- Photographs of people, including portrait avatars where present, covered with visible labelled boxes.
- Provenance strips give x.com, capture UTC, sign-in state, displayed date/time and the meaning of each redaction label.
Limits:
- A screenshot records what X displayed at capture time, not whether the author's claims are true.
- A current screenshot does not authenticate earlier edits, deleted originals or screenshots attached by another author.
- A post is its author's claim or opinion. Allegations in it are not findings.
- Wallet attribution and the word “scammers” are Lookonchain's analysis, not findings.

@MageArez post on the QR-code token and Alon's repost
Redacted view · Change in Settings
The clearest image of the deleted post: Alon's retweet of Kimchi's QR-code poster, marked UN-RETWEETED by a third-party tool. Direct x.com screenshot.
- Source
- S48 x.com
- Post date shown
- 4:43 AM · Oct 23, 2026
- Screenshot taken
Edits & limits
What UNREPOST changed:
- Cropped to the target post, preserving its text, visible attachments and date/time line; unrelated replies, side panels and lower reply-filter controls omitted.
- QR codes covered with visible labelled boxes so they cannot be scanned.
- Photographs of people, including portrait avatars where present, covered with visible labelled boxes.
- Provenance strips give x.com, capture UTC, sign-in state, displayed date/time and the meaning of each redaction label.
Limits:
- A screenshot records what X displayed at capture time, not whether the author's claims are true.
- A current screenshot does not authenticate earlier edits, deleted originals or screenshots attached by another author.
- A post is its author's claim or opinion. Allegations in it are not findings.
- The UN-RETWEETED screenshot comes from a third-party tool. UNREPOST has not seen the original post.
- The claim that the QR destination changed is the author's allegation.

@solana_sailor post: “Kimchi GOT HACKED”
Redacted view · Change in Settings
Another view of the deleted post, 17 minutes old, beside the token's spike. Direct x.com screenshot.
- Source
- S49 x.com
- Post date shown
- Last edited 6:52 AM · Oct 23, 2026
- Screenshot taken
Edits & limits
What UNREPOST changed:
- Cropped to the target post, preserving its text, visible attachments and date/time line; unrelated replies, side panels and lower reply-filter controls omitted.
- QR codes covered with visible labelled boxes so they cannot be scanned.
- Photographs of people, including portrait avatars where present, covered with visible labelled boxes.
- Personal links covered with visible labelled boxes.
- Provenance strips give x.com, capture UTC, sign-in state, displayed date/time and the meaning of each redaction label.
Limits:
- A screenshot records what X displayed at capture time, not whether the author's claims are true.
- A current screenshot does not authenticate earlier edits, deleted originals or screenshots attached by another author.
- A post is its author's claim or opinion. Allegations in it are not findings.
- “Hacked” is the author's framing. It remains unconfirmed (see R-B07).

@Deestar post: Kimchi removes Pump.fun from his bio
Redacted view · Change in Settings
A third screenshot of the deleted poster post, next to the token's spike. Direct x.com screenshot.
- Source
- S50 x.com
- Post date shown
- 5:39 AM · Oct 23, 2026
- Screenshot taken
Edits & limits
What UNREPOST changed:
- Cropped to the target post, preserving its text, visible attachments and date/time line; unrelated replies, side panels and lower reply-filter controls omitted.
- QR codes covered with visible labelled boxes so they cannot be scanned.
- Photographs of people, including portrait avatars where present, covered with visible labelled boxes.
- Provenance strips give x.com, capture UTC, sign-in state, displayed date/time and the meaning of each redaction label.
Limits:
- A screenshot records what X displayed at capture time, not whether the author's claims are true.
- A current screenshot does not authenticate earlier edits, deleted originals or screenshots attached by another author.
- A post is its author's claim or opinion. Allegations in it are not findings.
- “Rug token” and “ai image” are the author's characterisations, not findings.
All images: image archive.
Identifiers
- Project Kimchi mint
- B1Y2fJW8rtirrBuUcda14pSaeiASHaGqTxQdxU8Mpump Open explorer solscan.io
- PumpSwap pool
- 7XarT3gRATfP1KFRaRqwuJyJicBXNKUiS6BGi225ga5g
Token identities involved
Evidence tokens, kept apart by mint. Not $UNDO. No trading links.
22 October Project Kimchi (QR-code token)
B1Y2fJW8rtirrBuUcda14pSaeiASHaGqTxQdxU8Mpump
Basis
Protos (S05) links this DEX Screener market as the QR-incident token. We resolved the identifier through DEX Screener's API (S11), which lists it as the base token, and through our RPC read (S14), which confirms it is a mint.
Sources
- Its market and wallet figures are attributed to Lookonchain. Until the Lookonchain originals are retrieved, they are secondary support for Lookonchain's claims.
- The article itself warns that market capitalisation is not money lost, and that wallet transfers do not show who controlled the addresses.
- Market figures such as $14M, about $600,000 and about $183,000 are reported without timestamps, apart from the article date.
- Competing explanations come from named X users. Protos does not settle them.
- The ~$15M peak and $284K value are the article's own reporting, without a named data source or timestamp.
- It calls the event the 'October 23 collapse'. Other reports and the pair-creation time place the QR-code episode on 22 October UTC, so the date label may reflect a different timezone.
- A live market page supports observations at the time they were retrieved, nothing more. It is not a historical record of the peak.
- Market capitalisation is price multiplied by supply. It is not cash invested, cash withdrawn or traders' realised losses.
- This is one trader's public demand. It is neither a finding of responsibility nor a measure of how widely refunds were sought.
- The capture notes the post was edited.
- This is X's live rendering on 28 Oct 2026. The post may have been edited before then, and X truncates long text.
- A post is its author's claim or opinion. Allegations in it are not findings.
- This is X's live rendering on 28 Oct 2026. The post may have been edited before then, and X truncates long text.
- A post is its author's claim or opinion. Allegations in it are not findings.
- This is X's live rendering on 28 Oct 2026. The post may have been edited before then, and X truncates long text.
- A post is its author's claim or opinion. Allegations in it are not findings.
- This is X's live rendering on 28 Oct 2026. The post may have been edited before then, and X truncates long text.
- A post is its author's claim or opinion. Allegations in it are not findings.
- A screenshot records what X displayed at capture time, not whether the author's claims are true.
- A current screenshot does not authenticate earlier edits, deleted originals or screenshots attached by another author.
- The post's characterisation (“rug pull”, “scam”) is the author's allegation, not a finding.
- The attached image's origin and editing are not known to UNREPOST.
- A screenshot records what X displayed at capture time, not whether the author's claims are true.
- A current screenshot does not authenticate earlier edits, deleted originals or screenshots attached by another author.
- A post is its author's claim or opinion. Allegations in it are not findings.
- Wallet attribution and the word “scammers” are Lookonchain's analysis, not findings.
- A screenshot records what X displayed at capture time, not whether the author's claims are true.
- A current screenshot does not authenticate earlier edits, deleted originals or screenshots attached by another author.
- A post is its author's claim or opinion. Allegations in it are not findings.
- The UN-RETWEETED screenshot comes from a third-party tool. UNREPOST has not seen the original post.
- The claim that the QR destination changed is the author's allegation.
- A screenshot records what X displayed at capture time, not whether the author's claims are true.
- A current screenshot does not authenticate earlier edits, deleted originals or screenshots attached by another author.
- A post is its author's claim or opinion. Allegations in it are not findings.
- “Hacked” is the author's framing. It remains unconfirmed (see R-B07).
- A screenshot records what X displayed at capture time, not whether the author's claims are true.
- A current screenshot does not authenticate earlier edits, deleted originals or screenshots attached by another author.
- A post is its author's claim or opinion. Allegations in it are not findings.
- “Rug token” and “ai image” are the author's characterisations, not findings.
Responses, rebuttals & corrections
No response from the people or companies discussed was located as of the cutoff. That does not mean none exists. Send one.
Correction C-0002 ·
Updated source-access and image-acquisition descriptions after a direct x.com recheck. Current receipt wording now identifies the inspected original posts, while deleted originals remain uninspected and analyst/author claims retain their limits.
A signed-in normal browser made the current post views available on 28 October 2026. Earlier capture-service/embed records and their access history are preserved; this does not authenticate deleted originals or prove the posts' allegations.
R-A06.supportSummary: "Two independent news reports (different origin groups) plus the complaint itself."
R-B01.summary: "Protos reports that Kimchi and Pump.fun worked together on the 'Pill Your Friends' campaign, and that Alon Cohen called Kimchi 'the first ever example of a trader becoming a celebrity'. A capture of Alon's 20 October post shows similar language and says Kimchi would help set creative direction."
R-B01.eventDateNote: "The status ID decodes to 20 October 2026, 23:19 UTC. That time is derived from the ID, not displayed by an original we inspected."
R-B01.supportSummary: "A third-party capture of the post (the original returned HTTP 402) and Protos's account."
R-B01.limitations: ["The original post was not inspected. A capture service supplied the text."]
R-B03.limitations: ["UNREPOST has not seen the deleted posts. They are not presented as inspected originals.","No capture of Kimchi's QR-code post or of Alon's repost was located, so neither is pictured. The poster image shown comes from a third party's refund demand (S15).","A repost and its removal do not by themselves show coordination, intent, wallet ownership or profit."]
R-B04.limitations: ["Market cap is not cash stolen, money deposited or traders' realised losses.","The Lookonchain figures are secondary: the original post was not inspected (S17)."]
R-B05.limitations: ["The Lookonchain original was not inspected (S17).","This estimate must not be combined with Bitquery's figure for the separate 20 October token (R-B02)."]
R-B06.summary: "A captured post by @tontheneko asks Alon to refund people who lost money on the coin he reposted, arguing that he should have checked it first. crypto.news reports this demand as an allegation and says it found no verified refund arrangement."
R-B06.eventDateNote: "The status ID decodes to 22 October 2026, 20:54 UTC. That time is derived from the ID. The capture was taken 23 October, 01:01:31 UTC."
R-B06.supportSummary: "A capture of the demand and a news report that describes it."
R-B07.supportSummary: "Several reports describing competing explanations, with no attributable confirmation."
R-B08.supportSummary: "Two reporting origins: 99Bitcoins, with its two syndications counted once, and Protos."
R-B09.eventDateNote: "The thread's status IDs decode to 22 October 2026, 10:39 UTC. That time is derived. Post 1/ was captured 23 October, 00:43:41 UTC; posts 2/ to 4/ on 26 October, 20:03:32 UTC."
R-B09.supportSummary: "The analyst's own thread, posts 1/ to 4/, via captures, and two reports that cite it."
R-C01.supportSummary: "One news report linking several participants' posts."
R-C02.supportSummary: "A single news report."
R-C03.summary: "A capture of Alon's post shows him announcing 'the BIGGEST competition we've ever hosted on the Pumpfun app': $2.5M for the top three Squads by PnL over two weeks. Per the capture, the quoted Pump.fun post set the sign-up deadline at Monday, 26 October. Protos reports that critics say the format favours large KOL groups."
R-C03.supportSummary: "A third-party capture of the announcement and a news report."
R-C03.supports: ["The announced prize structure and dates, as captured."]
R-C03.unresolved: ["The terms as finally run. The capture notes the post was later edited."]
R-C03.eventDateNote: "The status ID decodes to 23 October 2026, 15:05 UTC. That time is derived. The capture was taken 24 October, 00:36:32 UTC."
Related receipts
Revision history
| Revision | Date | Change |
|---|---|---|
| 5 | Added a Settings choice between redacted and original post screenshots without redactions. The default remains redacted; capture dates, source attribution and claim limitations are unchanged. Release 2026.10.29-r6. | |
| 4 | Replaced linked capture-service/embed images with reviewed direct x.com screenshots; added sources S40, S47, S48, S49, S50. Full text, attachments, visible timestamps and labelled redactions were checked. Earlier sources and revisions remain available; claim limitations are preserved. Release 2026.10.28-r5. | |
| 3 | Added images of the deleted QR-code post and Alon's retweet, as screenshotted in third parties' posts (S17, S20, S21, S22). The original is still uncaptured. Release 2026.10.28-r4. | |
| 2 | Added the poster image from the captured refund demand (S15), with its QR code obscured, and a note that no capture of the deleted posts was located. Release 2026.10.28-r2. | |
| 1 | First publication in release 2026.10.28-r1. |