PANews reported on September 16th that blockchain analysis platform Bubblemaps published an article on the X platform claiming that an entity had received $4 million in tokens from the AVNT airdrop. This Sybil attack was a coordinated operation involving over 300 addresses. Several airdrop recipients showed clear signs of a Sybil attack: funds were received from Coinbase, USDC was received from a small group of senders, exchanged on Avantis, claimed the airdrop, consolidated tokens in a small number of addresses, and simultaneously transferred funds to centralized exchanges (Bybit/Gate). As with MYX, these wallets had been idle prior to the AVNT airdrop, and the pattern of fund injections and claims matched perfectly, indicating a coordinated operation.