Sniper bots on Solana and why the first seconds matter

A sniper bot is a program that buys a new token in the same block it launches, or within a few seconds, before most people have even seen the coin. On Solana, snipers win that race by paying extra fees to get their transactions processed first, often sent as Jito bundles. Some snipers are outsiders, but many are the coin's own creator buying through fresh wallets. Either way, they hold the cheapest tokens and usually sell within minutes, and the people they sell to are later buyers.

What does sniping mean in crypto?

Sniping means buying a token at the very first moment it can be traded, usually with software rather than by hand. The sniper gets the lowest price on the launch curve or in the new pool, then sells into the buyers who arrive after them.

On Solana a block (a batch of transactions added to the chain) is produced about every 0.4 seconds, so "first block" really does mean the first fraction of a second. No person clicking a button on a website can compete with that.

How do sniper bots get in first?

Sniper bots use speed and money. They watch for new tokens and pools being created, then send a buy straight away with a high priority fee attached.

Priority fees. Solana lets any transaction add an optional fee on top of the base fee. Solana's documentation says this fee "increases the likelihood" that the validator producing the block schedules your transaction ahead of competing ones (Solana docs).
Jito bundles. Jito, a widely used block-building service on Solana, accepts bundles: groups of up to five transactions that run in a fixed order in the same slot, all or nothing, with a tip paid to be considered (Jito docs). That lets someone create a token and buy it in the same instant, or line up several buys from different wallets so none can be beaten.
Fast connections. Serious snipers pay for low-delay access to the network so they see new tokens sooner.

If that sounds like a bundled launch, it is closely related. A bundle is often the tool; sniping is what it is used for.

Is it the creator or an outside sniper?

There are two quite different kinds of sniper, and they look similar on a chart.

	Creator self-sniping	Outside snipers
Who	The coin's creator, or wallets they funded	Unrelated bots racing to be first
How they get in	Buy in the creation block, often in a bundle	Buy in the first blocks after launch
What it hides	How much of the supply the creator really holds	Nothing, they are simply faster
Usual exit	Sell into the first wave of real buyers	Sell within seconds or minutes

Research by Pine Analytics, published in April 2025, looked at pump.fun launches from mid-March 2025. It found that over 50% of tokens were sniped in their creation block. Looking only at sniper wallets with a direct SOL link to the creator, it counted over 15,000 tokens in one month, and found that more than 55% of those snipes were fully sold in under one minute and nearly 85% within five minutes (Pine Analytics). That direct-link group is only the part that could be proven. Creators who funded their wallets through exchanges would not show up.

What does sniping mean for later buyers?

If a coin was heavily sniped, a large share of the supply sits with wallets that paid the lowest possible price and plan to sell quickly. When you buy a few minutes later, you are often buying the tokens they are selling. In trading slang, later buyers become the "exit liquidity": the money the early wallets cash out into.

That is why an early chart can look like a strong start and then fall away. The first green candles are often the snipers' own buying, and the drop is them leaving. Our guide to how memecoin trading works explains why the earliest wallets usually win and later buyers usually lose.

Warning: A coin can look busy with dozens of holders in its first minute when most of them are bots or wallets run by one person. Holder counts this early tell you very little.

How can you tell if a token was sniped?

You can usually see sniping in the token's earliest trades and in its holder list. These checks take a few minutes.

Paste the contract address into our rug check to see the token's warning signs graded A to F, including same-size bags and linked insider wallets.
Open the token on Solscan and look at its earliest transactions. Several buys landing in the same block as the token's creation, or in the next one or two, is the clearest sign of sniping. Our guide on checking holders on Solscan shows where to look.
Check the top holders for near-identical bags. Wallets that bought the same amount at the same moment are usually one script. See bundled launches for what counts as near-identical.
Open two or three early wallets. If they were created minutes before launch and funded from the same address, treat them as one holder. Insider wallets explains the links to look for.
Look at the map. Bubblemaps draws lines between wallets that have moved funds to each other, which makes a cluster of snipers easy to spot. See how to read Bubblemaps.
Check whether the early wallets have already sold. If the first buyers have emptied their bags, the snipe is over and the price you see is what is left after it.

A coin that was sniped is not automatically a rug. By Pine Analytics' count, more than half of pump.fun launches are sniped in their very first block. What matters is how much of the supply the early wallets still hold and whether they are linked to the creator.

Are sniper bots legal?

Using software to buy a token quickly is not, as far as we are aware, specifically banned in the UK, and trading memecoins is largely unregulated there today. That does not make everything around sniping lawful. Faking a "fair launch" while secretly holding a large share, in order to sell to people who believed it, can amount to fraud whatever tool was used. We are not lawyers, and this is not legal advice.

Should you use a sniper bot yourself?

We don't recommend it, and this page will not name any bot. Not financial advice, but the risks are plain:

Someone else may hold your keys. Many trading bots run inside Telegram and create a wallet for you, which means the bot service holds the private key. Your funds are only as safe as that service. In September 2024, 11 users of one Telegram trading bot, Banana Gun, had about $3 million taken through unauthorised transfers, which the team linked to a vulnerability in a Telegram message oracle it used. It paused its Solana and Ethereum bots and promised full refunds from its treasury (The Block).
Fees add up. Bots typically charge a cut of every trade, and sniping only works with high priority fees and tips. Many snipes lose money once those costs are counted.
You are racing insiders. A creator who buys in the creation block cannot be beaten, because the token did not exist for anyone else until that moment. Outside snipers often buy just after the creator and sell into the same crowd.
Bots buy rugs too. A bot buys whatever matches its settings. It does not check whether the creator can mint more tokens or freeze yours. See mint and freeze authority.
Fake bots exist. Copies of popular bots, and "bot setup" links sent in direct messages, are a common way to drain wallets. See wallet safety.

If you trade at all, a normal swap through a well-known exchange with sensible slippage and priority fees keeps your keys in your own wallet.

Not financial advice. This guide explains how things work. It is not a recommendation to buy, sell or hold anything. Memecoins are extremely high risk and most go to zero.