Academy
How to Spot a Rug Pull
Compartir publicación
En resumen
A rug pull is when a token's creators drain its liquidity and vanish. Learn the on-chain warning signs — unlocked liquidity, concentrated holders, risky contract functions — and how to check a token before you buy.
A rug pull is a crypto scam in which a token's creators or insiders abandon a project after extracting value from investors. One common method is removing liquidity from a decentralized exchange (DEX), making it difficult or impossible for holders to sell without significant losses. Other rug pulls involve insiders selling large token allocations or using privileged contract functions against holders.
You can identify many rug-pull warning signs before buying by checking a token's liquidity, holder distribution, and smart-contract permissions. These checks can reduce avoidable risk, but they cannot guarantee that a token is legitimate or that you won't lose money.
A common scenario is that developers launch a token, attract buyers and liquidity, and then remove liquidity or sell a large portion of their holdings. The resulting price collapse can leave investors with substantial losses.
What Is a Rug Pull?
A rug pull is a type of exit scam in decentralized markets. Developers launch a token, attract buyers to build up its liquidity pool, then pull that liquidity (or dump their own large holdings) and disappear — leaving holders with a token they can't sell. There are two common forms:
| Type | What happens | Tell |
|---|---|---|
| Hard rug (liquidity pull) | Devs remove the liquidity pool; the token instantly goes to ~zero | Liquidity was never locked |
| Soft rug (slow dump) | Devs quietly sell their large allocation over time | A few wallets hold most of the supply |
| Honeypot | Contract code lets you buy but blocks you from selling | Sells fail in the contract's code |
What Are the Warning Signs of a Rug Pull?
Most rug pulls share the same red flags. If several appear together, treat the token as high-risk.
| Warning sign | Why it matters | Where to check |
|---|---|---|
| Liquidity not locked | Devs can withdraw the pool at any moment | DEX Screener, token's LP lock |
| Concentrated holders | A few wallets can crash the price by selling | Block explorer holders tab |
| Mint function open | Team can create unlimited new tokens | Contract code / token scanner |
| High or changeable sell tax | You may be unable to sell profitably — or at all | Token scanner |
| Anonymous team, no audit | No accountability if the project fails | Project site / socials |
| Hype with no product | Pressure to "buy now" is a manipulation tactic | Socials / Telegram |
A single warning sign does not automatically prove that a token is a scam. Look at the complete picture and understand what each contract permission actually allows.
How Do I Check If Liquidity Is Locked?
To investigate liquidity locks, open the token on a DEX analytics platform or review its liquidity-pool information.
Locked liquidity generally means the liquidity-provider (LP) tokens are held in a mechanism that restricts withdrawal until specified conditions or a time period are met. However, the existence of a lock does not automatically make a token safe.
Check:
How much liquidity is available.
Who controls the liquidity.
Whether the liquidity is actually locked.
When the lock expires.
Whether the lock covers a meaningful portion of the liquidity.
Whether there are other pools or liquidity positions that remain under insider control.
An unlocked or very short-term liquidity lock can be an important warning sign, particularly when combined with other indicators.
How Do I Check Who Holds the Token?
You can examine a token's holder distribution by entering its contract address into a supported block explorer, such as Etherscan, Solscan, or BscScan.
Pay particular attention to the largest wallets and investigate whether they are connected to the project team.
A few wallets controlling a large percentage of the circulating supply can create significant selling risk. However, raw holder data can be misleading: exchanges, liquidity pools, bridges, burn addresses, and other contracts may appear among the largest holders.
The goal is to understand who controls the economically relevant supply, not simply to count the largest addresses.
What Contract Red Flags Should I Look For?
Token-security scanners can analyze contracts for potentially risky permissions and behaviors. Tools such as Token Sniffer, Honeypot.is, and GoPlus may flag issues that deserve further investigation.
Some important areas to check include:
Mint permissions: Can an authorized account create additional tokens?
Blacklist or freeze functions: Can specific addresses be prevented from transferring tokens?
Transfer restrictions: Does the contract impose unusual conditions on buying or selling?
Sell taxes: Can fees be changed after launch?
Honeypot behavior: Can users buy but fail to sell under normal conditions?
Owner privileges: Does a privileged wallet retain significant control over the token?
A scanner's result is a research aid rather than proof that a token is safe. Review the underlying permissions and understand who controls them.
Can a Wallet Warn Me Before I Buy?
Some self-custody wallets can screen transactions and token approvals for known risk signals.
Trust Wallet's built-in Security Scanner can check transactions and token approvals and provide warnings before you confirm certain interactions. These warnings are designed to prompt additional review, not to guarantee that a token, contract, or transaction is safe.
For this reason, use wallet security features alongside independent checks of liquidity, holders, contract permissions, and the project's background.
How Do I Protect Myself From Rug Pulls?
There is no way to eliminate the risk of a rug pull, but you can reduce avoidable risks by following a consistent checklist:
Check liquidity and its lock status before buying.
Review holder distribution and investigate unusually large wallets.
Check the contract for mint, blacklist, freeze, ownership, and transfer permissions.
Test whether selling is possible and review any applicable trading restrictions or taxes.
Research the project's team, website, documentation, and public history.
Be cautious of extreme hype, unrealistic returns, and pressure to buy immediately.
Don't assume that an audit, liquidity lock, or security score alone makes a token safe.
Only use money you can afford to lose.
Never share your secret recovery phrase or private keys.
Disclaimer: Content is for informational purposes and not investment, financial, or tax advice. Web3 and crypto come with risk. Please do your own research with respect to interacting with any Web3 applications or crypto assets. View our terms of service.
