A rug pull is when the people behind a token or project take investors' money and leave. Sometimes it is dramatic: liquidity drained in one transaction. Sometimes it is slow: the team quietly sells, development stops, and the Discord turns into a museum. Either way, the money is gone, and "it was decentralized" is not a refund policy.
You cannot eliminate the risk. You can make yourself a much harder target.
The main types of rug pull
Liquidity pulls. A new token is paired with ETH, SOL or a stablecoin in a liquidity pool on a decentralized exchange. Buyers swap into the token. The creator, who holds the liquidity provider (LP) tokens, withdraws the pool and walks off with the paired asset. The token is now worth roughly nothing because there is nothing left to sell it into.
Mint or dump pulls. The contract lets the owner create new tokens at will, or the team holds a large unlocked share. They sell into buyers until the price collapses.
Honeypots. The contract lets you buy but blocks or heavily taxes selling. The chart looks great because nobody can sell.
Soft rugs. No single malicious transaction. The team raises money, ships little, sells allocations, and gradually disappears. Harder to prove, more common than the dramatic kind.
Warning signs you can check yourself
1. Is the liquidity locked or burned?
For new tokens, check whether the LP tokens are locked in a time-lock contract or burned. Unlocked liquidity held by a single wallet means one transaction can empty the pool. A lock is not a guarantee, so also check how long the lock lasts. A two-week lock buys you two weeks.
2. What can the contract owner do?
Look at the verified contract on the block explorer. Red flags include:
- A mint function the owner can call.
- Functions that can pause trading, blacklist addresses, or change taxes after launch.
- An upgradeable proxy controlled by a single key, which means the code you read today can be replaced tomorrow.
- Unverified source code at all. If you can't read it, assume the worst.
Ownership renounced, or admin powers held by a multisig with known signers and a time-lock, is a better sign, not a clean bill of health.
3. Who holds the supply?
Open the holders tab. If a few wallets hold most of the supply, those wallets decide the price. Remember that large addresses may be exchange wallets, vesting contracts or the treasury, so identify them before you panic, but identify them.
4. Can you actually sell?
Honeypot checkers simulate a buy and sell. You can also test with a tiny amount first. If a token has an unusual sell tax, a "max sell" limit, or the simulation fails, leave.
5. Who is the team?
Anonymous teams are common in crypto, and some have built excellent things. But anonymity removes a consequence. Look for a track record: previous projects, public GitHub history, audits, investors who have their own reputations at stake. A team that is anonymous and new and promising guaranteed returns has stacked three red flags in one sentence.
6. Was the contract audited, and by whom?
An audit from a known firm is useful. It is not a shield. Read the report: audits list findings, and some projects publish an audit while leaving the critical issues unresolved. Also check that the audited contract address matches the one you are buying.
7. How is it being marketed?
Guaranteed yields, countdown timers, "don't miss out," paid influencer threads, and moderators who ban questions about tokenomics are not proof of a scam. They are a pattern scams share. Projects with real products tend to talk about the product.
Quick checklist
Before buying a new or small-cap token:
- Confirm the contract address from the official site, not a reply on X.
- Check the contract is verified and scan for mint, pause, blacklist and tax-change powers.
- Check whether liquidity is locked, for how long, and by whom.
- Review the top holders.
- Run a honeypot / sell simulation or test with a tiny amount.
- Read the audit if one exists.
- Search the team's history.
What to do if you got rugged
Revoke token approvals for the contract using a revoke tool, so it cannot pull anything else from your wallet. Document the transaction hashes. Report it to the platform where it was promoted and, in the US, to the FBI's IC3 portal. Be extremely wary of "recovery services" that contact you afterward. Recovery scams target rug victims specifically, because they already know you have lost money and want it back.
The bottom line
Most rug pulls are visible in hindsight and many are visible in advance: unlocked liquidity, owner-controlled contracts, concentrated supply, and marketing that is louder than the product. Five minutes on a block explorer will not make you safe, but it will make you inconvenient to rob, and that is often enough.
Related: wallet security basics and how to read tokenomics.
Educational content only. Not financial advice.