What Is a Crypto Rug Pull? How to Spot and Avoid It

Yara Fernandez
Yara Fernandez
Crypto Regulation & Policy Press Release Expert
Published 2026-05-13
Updated 2026-05-13
What Is a Crypto Rug Pull? How to Spot and Avoid It Article Image

A rug pull is a type of crypto scam where project developers create a token or DeFi protocol, attract investors, then suddenly withdraw all liquidity or abandon the project — leaving investors with worthless tokens. The name derives from the phrase "pulling the rug out from under" someone. Rug pulls are the dominant fraud type in the DeFi and meme coin ecosystem, responsible for billions in annual investor losses.

Types of Rug Pulls

Hard Rug (Liquidity Removal)

The most obvious form: developers add initial DEX liquidity, attract buyers who drive up the token price, then withdraw all liquidity from the pool in a single transaction. The token price drops to near-zero instantly as there is no liquidity to trade against. Investors hold tokens but cannot sell because the liquidity pool is empty. This can happen in seconds and is often done through smart contract automation.

Soft Rug (Gradual Abandonment)

Developers don't exit in one dramatic event — they gradually reduce activity, stop delivering roadmap milestones, sell their vested tokens slowly over time, and eventually disappear. The token price declines slowly over weeks or months. Harder to detect than a hard rug because it resembles normal project failure rather than obvious fraud.

Exit Scam via Exploit

Developers intentionally write exploitable vulnerabilities into smart contracts, then "hack" the protocol — draining the treasury and user funds while claiming victim status. More sophisticated than direct rug pull.

Rug Pull Protection Checklist

  1. Liquidity locked: Check liquidity lock on the token's Unicrypt or Team.Finance page. Locked for 12+ months = rug protection for that duration
  2. Ownership renounced or multisig: Contract admin privileges should be renounced or held in a multi-signature wallet that requires multiple approvals to execute
  3. Honeypot check: Use honeypot.is — verifies whether tokens can actually be sold
  4. TokenSniffer: Automated scan for malicious contract functions
  5. Team doxxed: Anonymous teams face no real-world consequences from rugging; doxxed teams do
  6. Audit published: Independent review of contract code

For the complete fraud protection guide, see our crypto fraud protection guide. For why liquidity locking is essential rug pull protection, see our liquidity lock importance guide. For the broader crypto wallet security practices to protect assets, see our crypto wallet security guide.

Glossary

Liquidity Pool
The pool of token + stablecoin that enables DEX trading — removing this pool (rug pull) makes the token untradeable.
Honeypot
A malicious token that allows buying but blocks selling — designed to look like a legitimate investment while preventing exits.
Renounced Ownership
Smart contract admin keys permanently disabled — the developer can no longer modify the contract or drain liquidity through privileged functions.

Disclaimer

Important: Even with all checks, sophisticated rug pulls can evade detection. This guide is educational only. CryptoPresaleNews.com is not a licensed financial advisor.

Yara Fernandez
Yara Fernandez Crypto Regulation & Policy Press Release Expert
521+ articles
1 Year experience
Regulation specialty

Yara Fernandez dives into NFT drops, Latin American crypto art, and GameFi projects that bridge culture and blockchain. As a respected name in crypto journalism, she delivers valuable insights on NFT and Web3 topics from around the world. Her work blends deep research with simplicity, making it easy for readers to understand the fast-moving world of crypto. She focuses on topics related to NFT and Web3 reporting and regularly covers emerging trends, technology updates, and community stories.

✍️ WHAT'S YOUR OPINION?
Frequently Asked Questions

Have questions? We have answers!

A rug pull is when crypto project developers attract investor capital then abandon the project and take the funds — leaving investors with worthless tokens. Types: hard rug (developers withdraw all DEX liquidity in one transaction, token goes to zero instantly), soft rug (gradual abandonment with slow token sell-off over weeks), and exit-scam exploit (developers 'hack' their own protocol). Rug pulls dominate DeFi and meme coin fraud.
Hard rug sequence: (1) developers deploy token and add liquidity to DEX pool, (2) marketing drives buyers to purchase, pushing price up, (3) developers have LP tokens representing ownership of the liquidity pool, (4) developers call 'removeLiquidity' — withdrawing all ETH/BNB/SOL from the pool in one transaction, (5) token price drops to near-zero as there is no liquidity, (6) investors hold tokens they cannot sell. Can happen in seconds, often automated.
Liquidity lock verification: (1) find the DEX pool address for the token (from Dextools or Etherscan), (2) check Unicrypt (app.unicrypt.network) or Team.Finance (team.finance) for locked LP tokens, (3) verify the lock duration (minimum 6 months, 12+ months is better), (4) verify what percentage of total liquidity is locked (partial locks don't fully protect), (5) confirm the unlock date — plan your investment timeline accordingly.
A honeypot is a malicious token that allows purchasing but blocks selling through code embedded in the token contract — specifically in the transfer function. Victims can buy freely but receive an error when trying to sell. Detection: use honeypot.is before buying any new token. This tool simulates a buy and sell transaction and reports whether the sell succeeds. Takes 30 seconds and prevents one of the most common DeFi traps.
TokenSniffer (tokensniffer.com) is a free automated smart contract security scanner. It checks for: honeypot functions, dangerous admin privileges, high transaction taxes, similarity to known scam contracts, and liquidity status. While not a replacement for professional audit, it catches common contract red flags in seconds. Always run new token contract addresses through TokenSniffer before purchasing, especially for PinkSale or Pump.fun-type launches.
Soft rug: team doesn't exit dramatically but gradually abandons the project. Indicators: GitHub commits declining to zero, Telegram messages becoming less frequent, team members going silent on social media, roadmap milestones perpetually delayed, token price declining without any specific event. By the time soft rug is obvious, significant value has already been lost. Prevention: monitor development activity monthly using GitHub commit history and team social media activity.
Generally no — crypto transactions are irreversible by design. Options: (1) check if law enforcement has taken action (notable hard rugs sometimes result in arrests and asset recovery), (2) file with local financial crime authorities for any documentation benefit, (3) report the contract address to exchanges and block explorers to warn future investors, (4) some blockchain analytics firms track rug wallet movements — occasionally funds are partially recoverable if they touch regulated exchanges. Recovery probability is very low.
When a smart contract's admin/owner keys are permanently set to the zero address (0x0000...0000), the developer can no longer execute privileged functions: mint new tokens, modify fees, pause trading, or drain liquidity. Renounced contracts are immutable from the deployer's perspective — a strong rug pull protection. However: not all contracts should be renounced (some legitimate protocols need upgrade capabilities). For meme coins and simple token contracts, renounced ownership is a positive safety signal.
Rug pull: intentional theft by the project's own developers — insider fraud. Hack: exploitation of smart contract vulnerabilities by external attackers — outside attack. Both result in fund loss but have different legal and moral dimensions. Some 'hacks' are actually rug pulls disguised as exploits — developers introduce intentional vulnerabilities then 'hack' their own protocol. Indicators of a disguised rug: exploit benefits only wallets connected to the development team, timing coincides with large vesting unlocks.
Notable rug pulls: Squid Game Token (SQUID, 2021) — themed after the popular show, developers made it impossible to sell, then removed $3.38M in liquidity. Thodex (Turkey, 2021) — centralised exchange CEO disappeared with $2B in user funds. OneCoin — $25B fraud operating as investment scheme rather than functional blockchain. Frosties NFT (2022) — developers rugged $1.3M, later arrested and charged by US DOJ. These cases show rug pulls span from meme tokens to large organised fraud.
TelegramBanner header
Have Questions?

Our team will answer all your questions. We ensure a quick response.

Contact Us