Memecoins ยท Rug Pulls ยท DeFi Safety

Memecoin Rug Pulls: How to Spot Them Before the Developer Exits

A coin launches on pump.fun, 10x in an hour. You buy near the top. Twenty minutes later the developer wallet dumps every token into the pool. Price drops 95% in one transaction. This happens hundreds of times every single day on Solana and BSC.

Memecoin rug pulls aren't complicated. They don't require technical skill or sophisticated contracts. A developer launches a token, keeps 20-40% of supply in their own wallet, watches organic buyers push the price up, then sells everything at once. The whole operation can run from a phone.

The signal to exit is often obvious in hindsight. The frustrating part is that most of it is visible before you buy โ€” if you know what to look at.

How memecoin rugs differ from DeFi rug pulls

DeFi rug pulls typically involve complex protocols where developers exploit a smart contract flaw or pull liquidity from a yield farm. They often require coding knowledge and planning. Memecoin rugs need neither.

In a memecoin rug, the developer's leverage is simple: they hold a large fraction of the supply. When they sell, the price collapses. The contract itself may be entirely legitimate โ€” anyone can sell, there are no hidden restrictions. The danger is the supply concentration, not a technical exploit.

This also means the standard "is it a honeypot?" check at honeypot.is will come back clean โ€” because it isn't a honeypot. You need to check the holder distribution separately.

On-chain signals to check before you buy

Developer wallet allocation. Open the contract address in Etherscan (for EVM chains) or Solscan (for Solana). Go to the Holders tab. If the top wallet holds 15% or more of supply and isn't a known locked contract or burn address, that's the developer. They can dump that 15% at any time.

Contract renounced vs active owner. If the contract owner address is still active and isn't a dead wallet, the developer retains admin control. On Etherscan, check the Contract tab and look for "owner()" โ€” it should return a zero address (0x000...000) if ownership was renounced. An active owner can add mint functions, change taxes, or add blacklists at any time.

Age of top holder wallets. Brand-new wallets appearing among the top 10 holders at launch are almost always the development team using separate addresses to disguise their concentration. If five of the top ten wallets were created the same day the token launched, they're likely controlled by the same person.

The pump.fun and Solana launch pattern

pump.fun is the dominant memecoin launchpad on Solana. Tokens launch continuously โ€” dozens per hour. The standard lifecycle of a rug on pump.fun: a Twitter or Telegram account posts about the token, organic buyers push the price, the creator holds a large allocation from the bonding curve mechanics, and once they reach their target they sell.

Average lifespan: 2-6 hours. Some tokens survive longer by building genuine communities or meme traction โ€” but those are a small fraction. For rugcheck.xyz, paste the Solana token address and it will show you the creator's share, whether supply is concentrated, and flags for common risk patterns.

Liquidity lock vs burn โ€” what actually matters

Many projects advertise "locked liquidity" as a safety signal. It is a signal, but only if the lock is long enough to matter. A 7-day lock means the developer can rug on day 8. A 30-day lock gives you a month. You need at minimum 6 months โ€” and even then, the token might simply fail organically once the initial hype fades.

Burned liquidity (LP tokens sent to a dead wallet like 0x000...dead) is the only truly permanent signal. The liquidity can never be removed. This doesn't prevent a holder concentration dump, but it does prevent the developer from draining the pool directly.

For more on how DeFi rug pulls work across protocols, see our DeFi rug pull detection guide. For honeypot detection specifically, see how to detect honeypot tokens.

Frequently asked questions

What's the difference between a rug pull and a honeypot?

A honeypot blocks you from selling through the contract code. A rug pull lets you sell freely but the developer holds enough supply to crash the price before you can exit. Honeypot checks won't catch rug pulls โ€” you need to check holder distribution separately.

Is pump.fun safe to use?

The platform is legitimate. The tokens on it are almost all high-risk. Treat every pump.fun token as high-risk until you've verified the holder distribution and liquidity independently.

How fast does a memecoin rug pull happen?

Often within minutes of launch or at a price peak. A single large sell transaction from the developer wallet drops the price 90%+ in seconds. By the time you see it, the funds are already moving through multiple wallets.

Token security check โ€” before you buy in

GuardianAI's built-in security check scans any token contract for developer wallet concentration, sell restrictions, and liquidity status. Paste the address, get the flags in seconds. Free in the extension.

Get GuardianAI โ€” It's Free