What Is a Rug Pull in Crypto? How It Works and How to Avoid It
- A rug pull occurs when developers of a crypto project drain investor funds after accumulating liquidity, then disappear
- Three types: hard rug pulls (sudden exit), soft rug pulls (gradual abandonment and dumping), and exit scams from presale projects that never launch
- On-chain red flags include unlocked or short-lock liquidity pools, team wallets with large undisclosed token holdings, and smart contracts with mint or withdrawal functions the team can trigger unilaterally
- The best protection is to verify audits, check liquidity lock status on Unicrypt or UNCX, and assess whether the team is publicly identified and accountable
A rug pull is when the developers or founders of a crypto project suddenly abandon it and take investor funds, leaving token holders with worthless assets. The term comes from the idiom “pulling the rug out” from under someone. Rug pulls account for a significant share of all crypto fraud losses: Chainalysis estimated that rug pulls were responsible for approximately 37% of all crypto scam revenue in 2021, and the pattern has continued throughout subsequent cycles. This guide explains the mechanics of hard and soft rug pulls, how liquidity pool manipulation works, and the specific verification steps that reduce rug pull risk.
Types of Rug Pulls
Hard rug pull (liquidity drain). The developers mint tokens and create a liquidity pool on a decentralized exchange (typically Uniswap or PancakeSwap) by pairing the new token with ETH, BNB, or USDT. The project markets aggressively, attracting buyers who drive the price up. The developers then withdraw the liquidity (the ETH/BNB/USDT side of the pool) in a single transaction. Without liquidity, the token cannot be sold. The price crashes to zero. Token holders cannot exit their positions. The developers have taken the paired asset and disappeared. Soft rug pull (developer exit). A slower version where the development team gradually sells their token holdings while continuing to maintain the appearance of an active project. The price declines steadily as developer sell pressure overwhelms new buyers. By the time the pattern is clear, early investors and the development team have exited and retail holders are left with heavily depreciated tokens. Exit scam with smart contract backdoor. Some rug pulls use smart contracts with hidden backdoor functions that allow the developer to mint unlimited tokens, disable selling for specific addresses, or drain funds from the contract. These backdoors are discoverable through smart contract auditing.
How Liquidity Pool Manipulation Works
On automated market maker (AMM) DEXs like Uniswap, a liquidity pool consists of two tokens paired together. When a new token is created and listed, the creator provides initial liquidity by depositing both the new token and an established token (ETH, BNB, USDT). As buyers purchase the new token, they add the established token to the pool and receive the new token. When the creator removes liquidity (the rug pull), they withdraw all of the established token from the pool. Buyers who came in with ETH to buy the new token now cannot sell it back because there is no ETH left in the pool to receive. The liquidity removal transaction happens on-chain and is publicly visible, but often by the time it is noticed, the price has already crashed.
Red Flags Before Investing
Anonymous team with no verifiable history. Legitimate projects have identifiable founders with backgrounds that can be verified. Anonymous teams are not automatically scams, but they remove accountability that deters fraud. No smart contract audit from a reputable firm. An unaudited contract may contain backdoor functions invisible to the user. Reputable audit firms: CertiK, Trail of Bits, OpenZeppelin, Quantstamp, Halborn. Even an audited contract carries risk; the audit must have been completed before the token launched, not afterward. Locked liquidity for less than 6-12 months. Legitimate projects lock liquidity (using platforms like Unicrypt or Team Finance) for extended periods as a commitment signal. Short lock periods or unlocked liquidity mean the team can rug pull at any time. Developer wallet holds more than 20% of total supply. High developer token concentration means a single sell decision can crater the price. No working product. A token with no functional product, no testnet, and no tangible technical progress beyond a whitepaper and a Telegram group. Excessive social media hype with no substance. Aggressive marketing, paid influencer promotion, and “guaranteed 100x” promises are commonly associated with rug pull projects.
Verification Tools
TokenSniffer: analyzes smart contracts for common rug pull patterns and rates token risk. RugDoc.io: DeFi project risk ratings and rug pull auditing. Unicrypt: shows whether liquidity has been locked and for how long. Etherscan/BscScan: check the contract, verify the audit link points to a real published audit, and inspect developer wallet holdings and transaction history. DexScreener / DEXTools: real-time charts showing liquidity pool size and transaction volume; sudden liquidity drops are visible in real time.
Our Take
Rug pulls are one of the most systematically preventable DeFi risks because the warning signs are on-chain, verifiable, and available before any investment is made. Locked liquidity, a legitimate independent audit, verifiable team members, and non-concentrated token distribution are the four pillars of a project that cannot execute a classic rug pull. When any of these is absent, the risk increases accordingly. The 15-minute verification process – Etherscan, Unicrypt, CertiK, LinkedIn – costs nothing and eliminates the majority of clearly fraudulent projects before a single dollar is committed.
This article is for informational and educational purposes only and does not constitute financial advice.