What Is a Rug Pull?
A rug pull is a crypto scam where a project's creators suddenly withdraw their support and run off with investors' money. The most common form is removing the liquidity that backs a token, instantly crashing its price to near zero. Other variations involve dumping a hidden token allocation, minting unlimited supply, or disabling sells altogether.
Rug pulls are one of the most common and damaging scams in crypto. They thrive on hype, anonymity, and the fact that anyone can deploy a token in minutes for a few dollars. The damage is usually irreversible; once the liquidity is gone or the team has dumped, the tokens you hold are worthless.
Real-world examples:
- Squid Game token (SQUID): Surged over 83,000% on the back of the Netflix show's hype, then the developers pulled liquidity and the price crashed 99.99% in a single block. Buyers were left holding tokens they could not sell.
- IceTea (and countless copycats): Tokens marketed with celebrity names and trending memes that pumped briefly before the deployer drained the pool and disappeared within hours of launch.
6 Types of Rug Pulls
Not every rug pull looks the same. Here are the six most common patterns scammers use to exit with investor funds:
Liquidity Pull
The team removes the liquidity pool backing the token, crashing the price to near zero and leaving holders with worthless tokens they cannot sell.
Dev Dump
The developer holds a large hidden allocation and sells it all at once, dumping the price before anyone else can react.
Mint-and-Dump
The contract has a hidden mint function. The team mints millions of new tokens out of thin air and dumps them on the market, diluting every holder.
Honeypot Exit
The contract silently blocks all sells from the start, or the team flips a switch to disable selling right after enough buyers enter.
Proxy Upgrade
An upgradeable proxy contract lets the team push new code at any time; they wait for volume to build, then upgrade to add sell-blocking or mint functions.
Gradual Drain
Instead of one dramatic exit, the team slowly siphons value through high sell taxes, hidden transfer fees, or staged liquidity removals over days or weeks.
On-Chain Warning Signs
These are the signals you can verify directly on-chain before you ever send a transaction. Each one is a serious red flag on its own; multiple flags together are a near-certain scam.
Unlocked Liquidity
The LP tokens are not locked or burned. The team can pull the pool at any moment, instantly crashing the price to zero.
Active Mint Authority
The contract still allows minting new tokens. The team can inflate the supply and dump, diluting every existing holder.
Hidden Owner
Proxy patterns or setOwner calls can conceal the true controller, who retains the power to change contract behavior after launch.
Concentrated Holdings
A single wallet (often the deployer) holds 20% or more of the supply. One sell or one transfer can tank the entire market.
Unrenounced Ownership
Contract ownership is not renounced. The owner can upgrade logic, add taxes, pause transfers, or blacklist wallets at will.
No Audit
The contract has never been reviewed by a reputable auditor. Unverified code is a playground for hidden malicious functions.
Anonymous Team
No verifiable identities, no linked profiles, no track record. Anonymity makes it trivial to vanish after the rug.
Proxy / Upgradeable Contract
Upgradeable contracts can be changed post-launch. A safe-looking token today can become a trap tomorrow with a single transaction.
Low Liquidity Ratio
Market cap is huge but liquidity is tiny. Even a small sell causes a massive price drop, and the team can drain the thin pool in seconds.
Fresh Deployer Wallet
The deployer wallet was created the same day as the token, has no history, and is funded from a mixer or exchange with no KYC trail.
Behavioral Red Flags
On-chain data tells you what the contract can do. Behavioral signals tell you what the team intends to do. Watch for these patterns in how a project markets itself:
Aggressive Marketing
Paid influencers, guaranteed moon calls, and relentless shilling across Telegram, X, and Discord; the hype vastly exceeds any actual product or utility.
Guaranteed Returns
Promises of fixed daily profits, 'can't lose' trades, or price targets. No legitimate crypto project guarantees returns.
Anti-Sell Mechanics
The team celebrates 'diamond hands' and discourages selling, or the contract penalizes sellers; designed to trap liquidity inside the token.
Rushed Launch, No Code Review
The token launches hours after announcement with no audit, no whitepaper, and no time for the community to review the contract.
Fake Volume & Wash Trading
Trading volume looks high but the same few wallets trade back and forth to create the illusion of demand and attract real buyers.
Pressure to Buy Now
Constant urgency; 'price doubles in 10 minutes', 'last chance before exchange listing'. Real opportunities do not need manufactured FOMO.
How to Check Before You Buy
Run this 4-step checklist on every token before you commit any capital. It takes under a minute with the right tools.
- 1Get the verified contract address
Copy the contract address only from the project's official, verified website or verified social media. Never trust an address from a DM, a random Telegram group, or a comment; scammers paste fake 'official' addresses constantly.
- 2Run a rug pull check
Paste the address into Guava's rug pull checker. It instantly scans for unlocked liquidity, mint authority, hidden owners, holder concentration, and 30+ other risk signals across 31 chains; all in under 2 seconds.
- 3Review liquidity and holders
Confirm the liquidity is locked or burned for a meaningful period. Check that no single wallet holds a dangerous percentage of supply. If the top 10 wallets control most of the tokens, a dump is one transaction away.
- 4Verify ownership and code
Ensure contract ownership is renounced and there is no active mint function or upgradeable proxy. If the team can still change the contract, they can rug you after you buy.
What to Do If You Get Rugged
Recovering funds from a rug pull is rare, but acting quickly protects others and builds a record that can help investigations:
Frequently Asked Questions
What is a rug pull in crypto?
A rug pull is a scam where a crypto project's team suddenly removes liquidity, dumps their holdings, or disables selling, causing the token price to collapse and leaving investors with worthless assets.
How can I spot a rug pull before it happens?
Check for unlocked liquidity, active mint authority, concentrated holdings, unrenounced ownership, anonymous teams, and no audit. Use a rug pull checker to run these on-chain checks automatically in seconds.
What is the difference between a rug pull and a honeypot?
A honeypot blocks you from selling from the start. A rug pull usually lets you buy and sell freely until the team suddenly removes liquidity or dumps their tokens, crashing the price. Both result in total loss.
Can locked liquidity still be a rug pull?
Yes. Locked liquidity prevents a pool pull, but the team can still rug via a hidden mint function, a dev dump of a large allocation, or a proxy upgrade that adds sell-blocking code.
What should I do if I get rugged?
Report the contract on community databases like GoPlus and RugCheck, warn others in the project's chat and on social media, trace the stolen funds on-chain to help investigators, and document all evidence for any potential recovery or legal action.
Which chains have the most rug pulls?
Rug pulls happen on every chain, but they are most common on low-fee networks where deploying a token costs cents. Guava's checker covers 31 chains including Ethereum, BSC, Base, Solana, Arbitrum, Polygon, and more.
Is renounced ownership enough to be safe?
Renounced ownership is a good sign, but it is not sufficient on its own. Always also check liquidity locks, holder concentration, mint authority, and whether the contract is a non-upgradeable proxy.
Check Before You Trade
Guava's free tools run 30+ security checks on any token across 31 chains in under 2 seconds. Don't buy blind.