What Is a Rug Pull? 6 On-Chain Red Flags to Check Before You Buy

A rug pull is the moment a crypto project’s team drains the money and vanishes, leaving your tokens worth close to nothing. It is one of the most common ways retail buyers lose money in this market — and the uncomfortable truth is that most rug pulls leave fingerprints on-chain before they happen.

This guide shows you exactly how a rug pull works, the difference between a slow soft rug and a violent hard rug, and a six-point check you can run in about five minutes before you buy any token. If you would rather build these instincts the structured way, our structured crypto foundations course teaches wallet safety and token due diligence from the ground up.

What is a rug pull in crypto?

A rug pull is a crypto exit scam where the developers behind a token attract buyers, push the price up, then remove the liquidity or dump their own holdings — leaving everyone else holding a token they cannot sell. The name comes from having the rug pulled out from under you.

It is not a rare edge case. Rug pulls took in roughly $2.8 billion in 2021 and made up about 37% of all crypto scam revenue that year, according to Chainalysis. The tooling has only gotten easier since: anyone can deploy a token in minutes, seed a small liquidity pool, and market it aggressively on social media before pulling out.

The reason rug pulls are so common is structural. On a decentralized exchange there is no listing committee and no gatekeeper. A token exists the moment its contract is deployed, and it can trade against a pool of real money that the creator often still controls. That is very different from buying a listed stock — and it is why the check happens on you, not on the exchange.

How a rug pull actually works on-chain

To spot one, you need to understand the plumbing. When a new token launches on a decentralized exchange, the creator pairs it with a real asset — say USDC or ETH — inside a liquidity pool. That paired asset is the money buyers are really exposed to. Whoever controls the pool’s LP tokens controls the exit.

A hard rug is usually one of three moves. The team withdraws the liquidity so there is nothing to sell against. Or the contract contains a hidden mint function that lets the owner create unlimited new tokens and dump them. Or the token is a honeypot: the code quietly blocks everyone except the developer from selling, so the chart only ever goes up until the one wallet that can sell does.

Picture the mechanics with round numbers. A team launches a token, pairs it with $50,000 of ETH in a pool, and markets hard. Buyers pile in and the pool swells toward $400,000 as the price climbs. The team, still holding the LP tokens, removes the liquidity in a single transaction — walking off with the pooled ETH and leaving holders with a token that has nothing to trade against. The chart goes vertical, then flatlines at zero.

Security researchers catalogue these code-level traps precisely. Solidus Labs groups hard rugs into seven categories: honeypots, hidden mints, fake ownership renunciations, hidden balance modifiers, hidden fee modifiers, hidden maximum-transaction limits, and hidden transfer functions. You do not need to read Solidity to defend against them — you need to know they exist and to use tools that flag them, which is exactly what the checklist further down does.

Source: Chainalysis 2022 and 2025 Crypto Crime Reports; Solidus Labs Rug Pull Report, 2022.

Those numbers matter because they tell you rug pulls are an industrial process, not a handful of bad actors. Solidus Labs alone flagged nearly 200,000 rug pulls and smart-contract scams, and estimated around 350 new scam tokens were being created every day in 2022. You are not being paranoid by checking — you are matching the base rate.

The risk is also not spread evenly. When Solidus Labs measured scam-token density by chain, it found roughly 12% of BNB Chain BEP-20 tokens and 8% of Ethereum ERC-20 tokens were built to rug — a direct consequence of how cheap and fast tokens are to deploy on lower-fee chains.

What to do with this: the chain a token lives on is a rough prior, not a verdict. A BNB Chain token is not automatically a scam, but the base rate there is higher, so raise your scrutiny rather than lowering it because “fees are cheap.” The same discipline applies to whether you use a centralized or decentralized exchange — most rugs live on permissionless DEX listings precisely because nothing screens them first.

Soft rug vs hard rug: what’s the difference?

A hard rug is fast and technical. It is baked into the code or the liquidity: a honeypot, a hidden mint, or a one-transaction drain of the pool. Many hard rugs fire within hours or days of launch, before most buyers even notice the project existed.

A soft rug is slow and human. There is no single malicious function. The team simply stops shipping, quietly sells its allocation over weeks, lets the roadmap go stale, and eventually the socials go dark. Your token is not blocked — it just bleeds to zero as the people building it walk away.

The distinction changes how you protect yourself. Hard rugs are caught by inspecting the contract and the liquidity before you buy. Soft rugs are caught by watching behavior after you buy: unlocking schedules, team wallet activity, and whether development actually continues. One is a pre-purchase audit; the other is ongoing vigilance.

6 red flags to check before you buy

Here is the practical part. Run these six checks in order. Any single hard fail is enough to walk away — you do not need all six to be bad. Most of this data is public on the block explorer and free security tools; you are not doing anything an analyst does not do routinely.

Framework: practitioner due-diligence checklist; permission and honeypot categories per Solidus Labs Rug Pull Report, 2022.

What to do with this: treat it as a gate, not a scorecard. You are not weighing pros and cons — you are looking for a single reason to say no. Checks 1 through 5 catch hard rugs before you spend a cent; check 6 is your early-warning system for the slow soft rug. Reading the token’s supply and incentives properly is a skill of its own, which is why it helps to understand how to read a crypto token before you buy.

The mistakes that get beginners rugged

The checks only work if your behavior does not undermine them. These are the patterns that put money into rug pulls again and again:

• Buying on urgency. “Presale ends in 2 hours” exists to stop you running the six checks. Manufactured urgency is itself a red flag.
• Trusting an influencer’s call. Paid promotion is the single most reliable rug marketing channel. A big account posting a ticker is not due diligence.
• Confusing a rising chart with safety. A honeypot chart only goes up — because nobody but the developer can sell. Price action tells you nothing about whether you can exit.
• Skipping the sell test. People check the buy and never simulate the sell. The sell is the whole game.
• Putting in more than you can lose. Even clean-looking new tokens fail often. Position size is your last line of defense when a check misses something.

If you want the wider map of how these schemes are packaged and marketed, our breakdown of the seven crypto scams still draining people shows how rug pulls sit alongside phishing, fake exchanges and pig-butchering in the same playbook.

What to do if you already hold a suspicious token

Sometimes you run the checks late and the flags only appear after you have bought. Do not freeze — work the problem.

First, run the sell simulation immediately. If the token still sells, trimming to a position you can afford to lose entirely is rational risk control, not panic. If it does not sell, you are likely holding a honeypot and the money is already gone; record the contract address so you recognize the pattern the next time it is repackaged under a new name.

Second, watch the liquidity lock and the top wallets. If the lock is days from expiring, or a whale wallet suddenly starts moving, treat that as your exit signal rather than hoping the chart recovers. On a token you never fully vetted, hope is not a plan — a pre-set exit is.

Frequently asked questions

Trading and investing in crypto assets involves substantial risk of loss and is not suitable for every investor. Crypto is highly volatile and its regulatory treatment varies by country. This article is educational content, not investment advice.