Bible Network Crypto DeFi Onchain RWA AI Agent Stablecoin Chain SAFU CryptoTax DeFAI AGI Claude Me Claude Skill Claude Design Claude Cowork
Independent Media
Not affiliated with any project
Crypto Security, From Defense to Incident Response
safu-bible.com
LATEST
Private Key, Seed Phrase, Wallet Address: The Three Terms Everyone Confuses — and Who's Allowed to See What  ·  Address Poisoning: The Scam That Doesn't Need Your Signature — Just Your Copy-Paste Habit  ·  What Is Blind Signing: The Moment You Hit Confirm, Your Hardware Wallet Has No Idea What It's Signing  ·  No Hack, No Code Bug: Attacker Spent 0.5 ETH to "Legally Vote" $8.5 Million Out the Door  ·  Lost Your Phone, Locked Out of Every 2FA Code: The Industry's Fix Trades One Risk for Another  ·  It Wasn't Your Password That Leaked — It Was Your ID Photo and Home Address: Why a KYC Data Breach Should Worry You More Than a Hack
Glossary · Scam Patterns

Rug Pull

Scam Patterns beginner

30-Second Version · For the impatient
A scam where a crypto project's creators suddenly pull funds or liquidity and abandon the project, crashing the Token's value and leaving investors with no recourse.
Full Explanation +
01 · What is this?

The term "Rug Pull" comes from the English idiom "pulling the rug out from under someone," describing a scenario where a crypto project's founding team, after attracting investor funds, suddenly withdraws the project's core assets or liquidity and abandons it entirely — crashing the Token's value to near zero within an extremely short window and leaving investors holding tokens that can neither be traded nor cashed out.

The industry generally divides rug pulls into two types: a "hard rug pull" is one where the team deliberately built an exit mechanism into the project from the very start — for example, embedding a restriction in the Smart Contract that only allows the team's wallet to sell, or simply draining the entire Liquidity Pool from a decentralized exchange in one move. This kind of move is often completed within an extremely short window (sometimes under 30 minutes), producing a chart pattern with a vertical price spike immediately followed by a single red candle crashing straight to the floor. A "soft rug pull," by contrast, involves no pre-planted technical trap — instead, the team gradually drains the project's value by continuously selling off the large share of tokens it holds, a process that can stretch on for weeks or longer, making it far harder for investors to notice the project is already effectively dead.

02 · Why does it exist?

The fundamental reason rug pulls can happen at scale in the crypto space is that decentralized exchange liquidity pools require no identity verification or credit check whatsoever from whoever creates them — anyone can spin up a new Token in minutes, pair it with a certain amount of a mainstream asset (like ETH or a Stablecoin) to seed a Liquidity Pool, and immediately have that token tradable on the open market. This "zero-barrier market creation" is one of the core advantages decentralized finance was designed to provide — letting anyone participate in financial innovation without needing permission — but it also lets bad actors exploit that exact same mechanism to quickly dress up something that looks like a functioning project.

This type of scam is especially common in the meme coin market, because a meme coin's entire value proposition relies heavily on community hype and marketing buzz rather than any substantive technology or revenue model — meaning a scammer doesn't need to actually build anything. Generating buzz and buying pressure through social media, Discord, and Telegram is enough to pump the token's price in a short window and attract enough retail buyers, and at that point everything needed for a Rug Pull is already in place.

03 · How does it affect your decisions?

The most common actual mechanism behind a hard Rug Pull is the team directly withdrawing the paired asset half of the Liquidity Pool (for example, the ETH originally meant to let investors swap their tokens back into ETH). Once that half is withdrawn, the tokens investors hold — even though they technically still sit in their wallets — have no remaining path back into anything of value, because the liquidity pool no longer has enough counter-asset available to trade against. Another common hard rug pull tactic involves tampering with the Smart Contract itself so that, in practice, only wallet addresses controlled by the team are permitted to sell the Token — ordinary investors' sell transactions get technically rejected by the contract outright. This restriction is typically never disclosed in any public documentation and can only be found by carefully auditing the contract code.

A soft rug pull relies more heavily on a time lag and information asymmetry. Project teams typically reserve a substantial share of the token supply for themselves at launch (commonly called the team allocation or pre-mine), then sustain buying pressure through ongoing marketing activity. Once market demand builds up to a certain scale, the team begins gradually selling off their own holdings in installments — if the selling is broken up finely enough, it can go unnoticed in the short term, but the sustained sell pressure eventually crushes the token's price. By the time investors catch on, the token has often already fallen close to zero. Some soft rug pulls ultimately turn into hard rug pulls as well — once the team has largely cashed out their holdings, they may simply pull whatever liquidity remains in the pool, ending the entire project in one final move.

04 · What should you do?

When evaluating a new Token or project, there are several concrete, verifiable checks that can substantially reduce the odds of falling into a Rug Pull trap. First, check whether liquidity is locked — most legitimate projects lock the LP tokens representing ownership of the Liquidity Pool into a third-party time-lock contract for a fixed period, making it technically impossible for the team to withdraw those assets during the lock period. This information can usually be verified directly on a blockchain explorer; if no lock record can be found, or the lock period is unreasonably short, that's a clear red flag. Second, check the token's holder distribution — if a small handful of wallet addresses (especially team or unidentified ones) hold an unusually high share of the total supply, that means those addresses alone selling off could crash the price, and this information is also visible in a token's holder list on a blockchain explorer.

Third, look for unusual permission structures in the contract code — such as a function letting a specific address mint unlimited new tokens, or an extremely high sell fee (some malicious contracts set a sell tax as high as 99%, effectively banning selling outright). This does require some technical reading ability, or the help of an automated scanning tool for an initial screen, but any tool's output should be treated as a first-pass filter, not a final verdict. Fourth, and most basic but often overlooked: stay alert to marketing language promising "guaranteed high returns" or manufacturing urgency (like "buy now or miss out") — this kind of language is itself a common thread running through nearly every rug pull case, regardless of how polished a project's technical packaging looks.

Sources: Pump-and-Dump vs Rug Pull: Biggest Crypto Exit Scams (Sumsub), Crypto Rug Pulls: Complete Guide (Koinly)
Real-World Example +

In early 2025, the launch of a Trump-branded meme coin ($TRUMP) triggered significant controversy: insiders were tracked as controlling roughly 80% of the token's supply and withdrawing millions of dollars from the liquidity pool. On-chain analytics firm TRM Labs later investigated and found that insiders had generated an estimated $100 million in profit from the token, while a large number of retail investors suffered severe losses (with total losses estimated in the billions of dollars). At the same time, TRM Labs also noted that the incident showed no clear evidence of the kind of fraud typical in classic rug pulls — no hard-coded restrictions preventing selling, and no evidence the team immediately abandoned the project and disappeared — meaning it may not strictly meet the technical definition of a rug pull. Public perception generally viewed the case as exploitative, though its legal classification remains contested. This case illustrates well a gray area that comes up frequently in practice when judging what counts as a rug pull: insiders capturing disproportionate gains and retail investors suffering heavy losses is one question, and whether it technically constitutes deliberate fraud is another — the two can align, but they can also diverge.

Common Misconceptions +
✕ Misconception 1
× Misconception: If a smart contract has passed a security audit, a rug pull can't happen, when actually: most audits check whether the contract's code contains technical vulnerabilities, but a team actively draining liquidity pool assets or gradually selling off its own token holdings is, in itself, technically legal and involves no error in the contract's logic — audit scope typically doesn't cover a team's future behavioral intent
✕ Misconception 2
× Misconception: Rug pulls only happen to completely obscure, brand-new projects with no name recognition, when actually: even a project that quickly gains substantial media attention, celebrity endorsement, or heavy trading volume can still involve insiders holding a disproportionately large share of the token supply and cashing out heavily afterward — name recognition and trading volume by themselves are no guarantee that a project isn't a rug pull
Ask a Question
Please enter at least 10 characters
More Related Topics