A rug pull is a type of crypto scam where project developers create a token or DeFi protocol, attract investors, then suddenly withdraw all liquidity or abandon the project — leaving investors with worthless tokens. The name derives from the phrase "pulling the rug out from under" someone. Rug pulls are the dominant fraud type in the DeFi and meme coin ecosystem, responsible for billions in annual investor losses.
Types of Rug Pulls
Hard Rug (Liquidity Removal)
The most obvious form: developers add initial DEX liquidity, attract buyers who drive up the token price, then withdraw all liquidity from the pool in a single transaction. The token price drops to near-zero instantly as there is no liquidity to trade against. Investors hold tokens but cannot sell because the liquidity pool is empty. This can happen in seconds and is often done through smart contract automation.
Soft Rug (Gradual Abandonment)
Developers don't exit in one dramatic event — they gradually reduce activity, stop delivering roadmap milestones, sell their vested tokens slowly over time, and eventually disappear. The token price declines slowly over weeks or months. Harder to detect than a hard rug because it resembles normal project failure rather than obvious fraud.
Exit Scam via Exploit
Developers intentionally write exploitable vulnerabilities into smart contracts, then "hack" the protocol — draining the treasury and user funds while claiming victim status. More sophisticated than direct rug pull.
Rug Pull Protection Checklist
- Liquidity locked: Check liquidity lock on the token's Unicrypt or Team.Finance page. Locked for 12+ months = rug protection for that duration
- Ownership renounced or multisig: Contract admin privileges should be renounced or held in a multi-signature wallet that requires multiple approvals to execute
- Honeypot check: Use honeypot.is — verifies whether tokens can actually be sold
- TokenSniffer: Automated scan for malicious contract functions
- Team doxxed: Anonymous teams face no real-world consequences from rugging; doxxed teams do
- Audit published: Independent review of contract code
For the complete fraud protection guide, see our crypto fraud protection guide. For why liquidity locking is essential rug pull protection, see our liquidity lock importance guide. For the broader crypto wallet security practices to protect assets, see our crypto wallet security guide.
Glossary
- Liquidity Pool
- The pool of token + stablecoin that enables DEX trading — removing this pool (rug pull) makes the token untradeable.
- Honeypot
- A malicious token that allows buying but blocks selling — designed to look like a legitimate investment while preventing exits.
- Renounced Ownership
- Smart contract admin keys permanently disabled — the developer can no longer modify the contract or drain liquidity through privileged functions.
Disclaimer
Important: Even with all checks, sophisticated rug pulls can evade detection. This guide is educational only. CryptoPresaleNews.com is not a licensed financial advisor.
