Spotting a rug pull

Most scam tokens fail the same six checks. None of them require reading code.

A rug pull is a token created to be abandoned. Developers attract buyers, then remove the liquidity or dump their holdings, leaving an asset nobody can sell. The pattern repeats because it works — and because most buyers check nothing before sending money.

The six checks

1. Locked liquidity

If the pool backing the token can be withdrawn by its creator, it will be. Look for liquidity locked for a meaningful period, or burned entirely. Unlocked liquidity is the single most reliable warning sign there is.

2. Holder concentration

Check how much supply the top wallets hold. If a handful of addresses control most of it, price is whatever they decide it is. Exclude known burn addresses and the liquidity pool from that count.

3. Contract permissions

Some contracts let the owner mint new tokens, pause trading, blacklist wallets, or set a sell tax of 100% after launch. Any one of these makes the token unsellable at the owner's discretion. Public contract scanners will list these functions without you reading a line of code.

4. Can you actually sell?

A honeypot lets you buy and then blocks selling. Test with a trivial amount and sell part of it immediately. If the sell fails, you have your answer for the cost of a few cents.

5. Real activity, not the appearance of it

Volume can be faked by wallets trading with themselves. Look at whether holders are growing steadily, whether transactions come from many distinct addresses, and whether the chart shows real two-way trade rather than a straight line up.

6. Who is behind it

Anonymous is not automatically bad, but combined with unlocked liquidity and owner privileges it is a complete picture. Check whether the team has any history at all, and be sceptical of borrowed credibility — logos of partners who never announced anything.

If you still want to participate

1. Size it as money you expect to lose entirely, because you might.
2. Take your original stake out at the first meaningful gain. Playing with profit is a different psychological state than playing with rent.
3. Never connect a wallet holding your main assets. Use a separate one funded with only what you are risking.
4. Never sign an approval you do not understand. Most wallet drains are signatures, not hacks.

The three kinds of rug

They are not all the same, and the checks that catch each one differ.

The liquidity pull. The deployer removes the pool backing the token, leaving holders with something nobody can buy. Fast, obvious afterwards, and entirely preventable by checking whether liquidity is locked.

The honeypot. The contract allows buying and blocks selling, sometimes through a sell tax set to an absurd level after launch. Price rises beautifully because nobody can exit. Only a test sell catches this.

The slow rug. No dramatic event — the team simply sells into every rally over weeks while continuing to post updates. This is the hardest to detect and the most common, and holder distribution is the main defence.

Reading holder distribution properly

A token where a few wallets hold most of the supply is not a market; it is a decision those wallets have not made yet.

• Exclude the pool and burn addresses before judging concentration. Both routinely appear as top holders and neither is a risk.
• Look for clusters funded from one source. Twenty wallets each holding 2% that were all funded from the same address is one wallet holding 40%.
• Check how long holders have held. A holder list that turns over completely every few hours is traders, not a community.
• Watch the deployer wallet. Movement from it toward an exchange is the clearest warning available.

The test that costs a few cents

No amount of reading replaces this. Buy a trivial amount — a few dollars — then immediately sell part of it.

If the sell fails, reverts, or fills at a wildly different price than expected, you have your answer for the price of a coffee. If it works cleanly, you have verified the single thing every checklist can only infer: that the exit exists.

Pressure tactics, and why they work

Every scam in this category uses urgency, because urgency prevents checking. The specific forms repeat:

• A presale closing in hours. Legitimate projects do not need your decision tonight.
• A limited allocation "for early supporters". Scarcity manufactured to bypass analysis.
• Guaranteed or projected returns. No honest project projects returns.
• Borrowed credibility. Logos of partners who never announced anything, or a fabricated audit.
• Coordinated social enthusiasm that all began on the same day.

If checking the six items would take ten minutes and the opportunity supposedly expires in five, the timing is the product.

Sizing for the 85%

Roughly 85% of new launches are rugs or fail entirely. That figure should shape position size before any specific token is analysed.

1. Treat every entry as money you expect to lose. Not money you can afford to lose — money you expect to.
2. Remove your original stake at the first meaningful gain. Playing with profit is a different psychological state from playing with rent.
3. Never connect a wallet holding your main assets. Use a burner funded with only the amount at risk.
4. Never sign an approval you do not understand, and revoke old ones periodically.
5. Accept that you will miss winners. The checks that filter out rugs also filter out some genuine launches. That trade is worth making.

Common questions

Can a token be safe at launch and rug later?

Yes — that is the slow rug, and it is the most common form. Locked liquidity has an expiry date, ownership can be renounced after a malicious function is already in place, and teams can sell over months. Recheck rather than deciding once.

Does an audit mean a token is safe?

No. Audits vary enormously in quality, many claimed audits never happened, and an audit examines code rather than intent. A team can pass an audit and still sell everything.

What if I already bought something that looks like a rug?

Test whether you can sell with a small amount first. If selling works, decide on the position on its merits rather than on what you have already lost. If it does not, the funds are gone — revoke any approvals you granted and treat the wallet as compromised.