What Is a Rug Pull?
A rug pull is a type of crypto scam where the creators of a project or token hype it up to attract investors, then suddenly withdraw all the liquidity or funds and disappear — leaving holders with worthless tokens. The name comes from the phrase "pulling the rug out" from under someone.
Rug pulls are most common with new, low-quality tokens and DeFi projects, especially during periods of hype like meme-coin seasons, when excitement can outpace due diligence.
How Does a Rug Pull Work?
Scammers launch a token and create a liquidity pool on a decentralized exchange.
They aggressively market it to drive buying and inflate the price.
Investors pour in funds, adding to the liquidity.
The scammers suddenly remove the liquidity (or dump their pre-mined tokens).
The token's value collapses to near zero, and the team vanishes.
Common Types of Rug Pulls
| Type | What Happens |
|---|---|
| Liquidity theft | Devs drain the liquidity pool |
| Dumping | Insiders sell huge pre-held token allocations |
| Honeypot | Code blocks buyers from ever selling |
| Fake project | The whole project is fabricated to collect funds |
Red Flags to Watch For
Anonymous team with no verifiable track record.
Unaudited or locked-source code, or no security audit.
Unlocked liquidity that devs can withdraw at any time.
Massive token allocation held by the team.
Hype with no substance — heavy marketing, vague utility.
Guaranteed returns or pressure to buy quickly.
How to Protect Yourself
Research the team, check whether liquidity is locked, look for credible audits, examine the token distribution, and be skeptical of projects promising outsized returns. Never invest more than you can afford to lose in unproven tokens, and verify contracts before approving them.
Rug Pulls and Trust Wallet
Trust Wallet is a non-custodial wallet that gives you the tools to interact with DeFi safely — but you remain in control, so due diligence is essential. Before trading a new token, research it carefully and only approve contracts you trust. Because you hold your own keys, you decide what to interact with — and reviewing token approvals you've granted is a good habit to limit your exposure to malicious projects.
