Pump-and-dump has always worked by manufacturing excitement and selling into the people who chase it. An AI agent that reads social sentiment to find momentum is, in some ways, the ideal mark — it’s fast, tireless, and takes "everyone’s talking about this" at face value. The fix isn’t to ban sentiment; it’s to keep the agent from being the one holding the bag.

How it targets an agent

  • Manufactured volume of mentions. Coordinated posts make a thinly-traded name look like it’s breaking out. A sentiment- or momentum-driven agent reads the surge as a signal.
  • Timing the agent in. The hype peaks, the agent buys strength, and the organizers sell into that demand — your agent included.
  • Thin, manipulable names. These plays target low-float microcaps precisely because a little buying moves the price a lot, which makes the "signal" look even stronger.

Momentum and sentiment strategies are the most exposed here — the very thing that makes them work (reacting to strength) is what an attacker manufactures. (Momentum, bounded.)

The guardrails that keep your agent out of it

  • An allowlist. If your agent can only trade names you approved, a pumped microcap simply isn’t tradeable. This is the single most effective control. (Set it up.)
  • A denylist for junk — exclude sub-$1 names and low-float microcaps where these schemes live.
  • Treat sentiment as advisory. Hype informs, it doesn’t trigger; a human or the approval gate clears the buy. (Default-on in the Safety Kit.)
  • A concentration cap so even if one slips through, it can’t become a meaningful chunk of the account.
  • Don’t let "strong sentiment" relax a cap. The whole play depends on manufactured confidence — your limits stay fixed regardless.

The takeaway

Sentiment is a fine input and a terrible trigger. Keep the universe constrained, keep hype advisory, and the agent gets the read without becoming the exit liquidity. More attack classes in the trading-agent attack surface.

Telling a real breakout from a manufactured one is a security read as much as a market one — and it’s measurable. Test yours at secprove.com.