Skip to content
Prices
  • BTC$80,321▼ 1.31%
  • ETH$2,333▼ 2.82%
  • BNB$727.39▼ 2.10%
  • XRP$1.28▼ 1.88%
  • SOL$100.98▼ 2.95%
  • TRX$0.3293▼ 0.17%
  • HYPE$75.88▼ 2.50%
  • DOGE$0.0768▼ 3.39%
  • LINK$11.49▼ 4.12%
  • ADA$0.2059▼ 4.16%
  • AVAX$8.88▼ 2.76%
SecurityExplainers

What is a rug pull in crypto? Types, red flags, checks

A rug pull is when a token's creators drain the money and vanish. Learn hard vs soft rugs, honeypots, red flags to check before buying and what to do if hit.

· · 6 min read

Share
A red-and-green "Don't play" fraud warning stencilled on a Berlin pavement as a pedestrian walks past (illustrative photo)
Image: Ciara Ní Riain / Wikimedia Commons, CC BY-SA 4.0

A rug pull is a crypto exit scam in which the people behind a token or project attract investors' money and then take it, leaving everyone else with a token that can't be sold or is worth almost nothing. The name comes from the phrase "pulling the rug out from under someone." Rug pulls are most common among brand-new tokens — especially meme coins — traded on decentralised exchanges, where anyone can create and list a token in minutes without checks. This explainer covers how they work, the main types, the warning signs and what to do if you are caught in one. It is educational, not investment advice.

How a rug pull works

Most tokens on a decentralised exchange (DEX) trade against a liquidity pool: a smart contract holding the new token on one side and a valuable asset such as SOL, ETH or a stablecoin on the other. Buyers put real money into the pool; sellers take it out. (Our CEX vs DEX comparison explains pools in more detail.)

A typical rug pull follows a familiar script:

  1. Launch: an anonymous team creates a token, often riding a trend — a celebrity, a game, a viral meme — and seeds a small pool.
  2. Hype: social media, Telegram groups, paid influencers and fake volume push the price up. Early charts look spectacular, which draws in more buyers.
  3. Exit: once enough money has flowed in, the creators remove the pool's valuable side, dump a large hidden allocation, or trigger code that stops others from selling.
  4. Vanish: websites and social accounts go dark, and the token's price collapses towards zero.

The whole cycle can take hours, days or months.

The main types of rug pull

TypeWhat happensHow it looks to buyers
Liquidity pullCreators withdraw the valuable assets from the poolPrice crashes to near zero in one transaction
Honeypot / sell blockContract code lets people buy but not sell (or taxes sales at ~100%)Chart only goes up; your sell transaction fails
Hidden mintOwner can create unlimited new tokens and sell themSupply suddenly balloons, price slides
Insider dump (soft rug)Team or early wallets sell big allocations over timeSteady decline, team goes quiet
Abandonment (soft rug)Developers stop working and cash out treasury fundsRoadmap stalls, website and socials disappear
General patterns, not an exhaustive list. Several can happen in the same scam.

Hard rugs use malicious code or a sudden liquidity withdrawal and are generally treated as outright fraud. Soft rugs are murkier: founders selling tokens or walking away is not always illegal, which is why some high-profile meme coin collapses end up in long court fights rather than quick convictions — as Argentina's LIBRA case against President Milei, dismissed by a court this week, shows.

Red flags to check before you buy

No checklist catches everything, but these signs show up again and again:

  • Anonymous team, no track record. Anonymity isn't proof of fraud, but it removes accountability.
  • Liquidity isn't locked or burned. If the creator can withdraw the pool at any time, they can rug at any time. Look for a verifiable lock with a meaningful duration.
  • A few wallets hold most of the supply. Blockchain explorers and token scanners show the top holders; heavy concentration means a few sellers can crash the price.
  • The contract has dangerous permissions. Can the owner mint new tokens, pause trading, blacklist wallets or change sale taxes? Has ownership been renounced?
  • You can't find anyone who has sold. If the transaction history shows only buys, it may be a honeypot.
  • Copycat branding. Tokens named after games, films or brands are rarely official — see how copycat tokens appeared after the GTA VI trailer.
  • Pressure and promises. "Last chance," guaranteed returns or "100x by Friday" are sales scripts, not analysis.

Rug pull vs a project that simply failed

Most crypto projects fail without anyone stealing anything: the idea doesn't catch on, the market turns, or the team runs out of money. The difference is intent and control. In a rug pull, insiders design or use their privileged position — control of liquidity, hidden tokens, contract permissions — to take buyers' money. In an ordinary failure, the team loses alongside investors. In practice the line can be hard to draw from the outside, which is why the red flags above focus on what insiders could do, not just what they say.

What to do if you've been rug pulled

  • Stop sending money. Don't "average down" into a token whose liquidity has gone.
  • Revoke token approvals you granted to the project's contracts from your wallet, so it can't move other assets.
  • Record everything: contract address, transaction hashes, website, social accounts and screenshots of promises.
  • Report it to the police and to your country's fraud or financial-crime reporting service, and to the exchange or launchpad where the token traded.
  • Beware "recovery" offers. Strangers promising to retrieve your coins for an upfront fee are a well-known follow-up scam; our guide to spotting crypto scams explains why.

Keeping long-term holdings in a hardware wallet, separate from the wallet you use to try new tokens, limits how much one bad trade or malicious contract can cost you.

Frequently asked questions

What does rug pull mean in crypto?

It is an exit scam where a project's creators take investors' money, usually by draining a token's liquidity pool, dumping hidden tokens or blocking sales, and then disappear.

Are rug pulls illegal?

Hard rug pulls that use deception or malicious code are generally treated as fraud in many countries. Soft rugs such as insiders selling or abandoning a project are less clear-cut and depend on what was promised and local law.

Can you get your money back after a rug pull?

Rarely. Blockchain transactions cannot be reversed, and funds are often moved quickly. Law enforcement occasionally seizes assets, but you should report the scam and avoid paid recovery services.

How can I tell if a token is a honeypot?

Check whether other wallets have successfully sold, review the contract with an independent token scanner for sell restrictions or high sale taxes, and be wary of charts that only ever go up.

Does locked liquidity mean a token is safe?

No. A lock removes one way to rug, but creators can still dump large token holdings, use hidden contract functions or abandon the project once the lock expires.

This article is for information only and is not financial advice. Crypto assets are volatile; do your own research. Read our disclaimer

Share

More from Security

View all →

Read next

Tether CEO Paolo Ardoino speaking on stage, wearing a headset microphone
DeFi7 min read

USDT vs USDC: which stablecoin should you use?

USDT vs USDC compared: issuers, reserves, audits, regulation in the EU and US, networks, fees and depeg history, plus which dollar stablecoin fits which use.