DeFi Security ยท Rug Pulls ยท Token Research

How to Spot a Rug Pull Before It Happens

Most rug pulls are predictable. The signals are on-chain and readable before you invest โ€” if you know what to look for.

You find a new token on DexScreener. The chart is clean, the Telegram is active, and the market cap is still under $500k โ€” you think you're early. You buy in. A few hours later the chart drops 99% in seconds. The trading pool is empty. The dev wallet moved out. The Telegram is gone. You're holding tokens worth nothing and there's nobody to complain to.

That's a rug pull โ€” the developer drained the liquidity and disappeared. What stings is that the warning signs were there before you bought. On-chain, publicly readable, if you knew where to look. This guide is that checklist.

The rug pull checklist

Run through this before you buy anything. Each item takes 2โ€“5 minutes on Etherscan or DexScreener.

  • โ€”Liquidity lock โ€” are the LP tokens locked in a time-lock contract? Check on Unicrypt or Team.Finance. If the liquidity isn't locked, devs can rug at any second.
  • โ€”Lock duration โ€” a 7-day lock is almost meaningless. Look for at least 6 months, ideally 1โ€“2 years. Short locks are a sign the team doesn't plan to stick around.
  • โ€”Token distribution โ€” check the top holders on Etherscan. If one wallet holds 20%+ of supply, that wallet can crash the price by selling. Anything above 30% in one hand is a serious red flag.
  • โ€”Contract verification โ€” is the contract source code verified on Etherscan? Unverified contracts can hide functions you can't see. No audit + unverified = do not touch.
  • โ€”Admin functions โ€” even verified contracts can have mint, blacklist, or tax modification functions. GoPlus Security scans for these automatically.
  • โ€”Team identity โ€” is anyone on the team doxxed or have a real track record? Anonymous teams aren't automatically scammers, but they have nothing to lose by rugging.

Soft rugs vs hard rugs

A hard rug is the sudden kind โ€” devs remove liquidity in a single transaction and disappear overnight. Price goes to zero instantly.

A soft rug is slower. The team gradually sells their allocation over days or weeks while posting updates to keep investors calm. The price bleeds down. By the time it's obvious what's happening, early holders have exited and latecomers are trapped. Watch for team wallets making consistent sales while marketing volume stays high.

The patterns that make people ignore the red flags

Most rug pull victims knew something seemed off. They bought anyway. Here's why:

  • โ€”FOMO โ€” the chart is only green, the Telegram is growing 1,000 members a day, waiting feels like missing out
  • โ€”Social proof โ€” "influencers" promoted it (often paid in tokens that have already vested)
  • โ€”Sunk cost โ€” already bought a small amount and the price went up, so adding more feels safe
  • โ€”Denial โ€” the checklist has problems but the project looks too legitimate on the surface to be a scam

The checklist is only useful if you run it before you buy and actually walk away when it fails.

Frequently asked questions

What is a rug pull in crypto?

Developers remove all liquidity from a trading pool, crashing the token price to zero and leaving investors unable to sell. Can also happen through admin functions that mint tokens or drain a treasury after investors have bought in.

How can you tell if a project is going to rug?

Unlocked liquidity, concentrated token holdings in a few wallets, unverified contract, no audit, anonymous team with no history. Any one of these is a warning. All of them together is a near-certain rug.

What is a liquidity lock and why does it matter?

LP tokens locked in a time-lock contract means devs can't withdraw the liquidity until the lock expires. Without it, a rug is one transaction away โ€” and it takes under a second on most chains.

Automatic contract risk checks as you research

TxnGuide's Pro tooltip runs a GoPlus security scan on any contract address you hover over โ€” flagging hidden admin functions, sell restrictions, and token distribution risks without switching between tabs. Free Chrome extension.

Get TxnGuide โ€” It's Free