FBI Traps Crypto Market Makers in Operation Token Mirror

The FBI launched its own NexFundAI token to expose market manipulation. Gotbit CEO arrested as US authorities target crypto wash trading and pump-and-dumps.

Known as “Operation Token Mirror,” this investigation marks a significant escalation in how U.S. authorities combat crypto fraud. Rather than simply tracking crimes after they occur, officials are now actively embedding themselves into the market’s core infrastructure.

The operation centered on NexFundAI, an ERC-20 token created by the FBI on the Ethereum blockchain. This asset served as a decoy to lure crypto market makers and automated bot networks into the open.

Court documents reveal that undercover agents posed as promoters for a new crypto project. They explicitly told market makers that the goal was to artificially inflate trading volume to attract retail investors before executing an organized rug pull. This became a pivotal moment for the case: the targeted companies weren’t just providing liquidity; according to prosecutors, they knowingly agreed to participate in a pump-and-dump scheme.

Gotbit Becomes the Face of the Operation

Gotbit, once a prominent name in the meme coin ecosystem, is among the most heavily affected companies. The firm long marketed itself as a market maker for popular crypto tokens, actively pitching services to “enhance” market activity.

Gotbit CEO Alexey Andryunin was arrested in Portugal and currently faces extradition proceedings to the United States. The operation effectively confirmed long-standing suspicions that a massive portion of trading volume in small-cap cryptocurrencies is not driven by real investors, but by coordinated bot networks used to simulate interest and trigger FOMO among retail traders through algorithmic trading.

SEC Follows with Massive Civil Lawsuits

Alongside the Department of Justice’s criminal charges, the U.S. Securities and Exchange Commission (SEC) filed civil lawsuits against Gotbit, ZM Quant, and CLS Global. The regulator is utilizing FBI-gathered evidence to seek permanent injunctions and the disgorgement of allegedly illegal proceeds.

Court filings highlight the scale of the deception. In the case of SaitaRealty—a client of ZM Quant—over 83% of the trading volume was generated by automated operations designed specifically to prevent the token from being delisted by exchanges.

Market Realizes a New Risk: Undercover Agents

The operation sent shockwaves through the crypto industry. Previously, most investigations into crypto fraud focused on tracing stolen funds after a rug pull or hack had already taken place.

However, U.S. authorities have now demonstrated they can build smart contract infrastructure, launch tokens, and negotiate directly with market participants undercover. This shifts the playing field for the industry’s gray zones, as any new project could potentially be a federal sting operation.

The Automation of Crypto Scams

The NexFundAI case also exposed how rapidly automated bot networks react to market news. Within hours of the operation becoming public, scammers created copycat tokens on networks like Solana and Binance Smart Chain. These bad actors hoped to lure investors searching for “NexFundAI” who failed to verify the legitimate contract address.

This highlights the aggressive automation within the crypto fraud sector, where bot systems monitor news feeds and blockchain activity in real-time to exploit viral trends almost instantly. Analysts view “Operation Token Mirror” as a turning point for digital asset regulation—and a likely blueprint for future undercover operations in the crypto space.