What Is a Rug Pull?
A rug pull occurs when a crypto project's developers drain liquidity or dump their tokens, leaving investors with worthless coins. In 2023, rug pulls accounted for $2.8B in losses. The most common targets: new DeFi protocols, meme coins, and NFT projects.
How to Detect a Rug Pull Before It Happens
1. Check Liquidity Lock
If the project's liquidity is not locked in a time-locked contract (Unicrypt, Team Finance), the developers can withdraw it at any time. Always verify the lock on-chain, not just from the team's claims.
2. Analyze the Smart Contract
Use TokenSniffer or GoPlus to scan the token contract for red flags: hidden mint functions, honeypot code (you can buy but not sell), excessive owner privileges, or blacklist capabilities.
3. Check Token Distribution
Use Etherscan or BSCScan to check top holders. If the team or a few wallets hold more than 20% of supply, the dump risk is elevated. Check if large holders are connected (same funding source).
4. Verify the Team
Anonymous teams are higher risk. Check LinkedIn profiles, past project history, and GitHub commits. If the team has no verifiable identity or track record, proceed with extreme caution.
5. Audit Status
Reputable audits (CertiK, Trail of Bits, OpenZeppelin) reduce risk but do not eliminate it. Multiple audits are better than one. No audit is a major red flag for any project handling significant funds.
| Red Flag | Risk Level | How to Check |
|---|---|---|
| No liquidity lock | Critical | Unicrypt, Team Finance, DexTools |
| Hidden mint function | Critical | TokenSniffer, GoPlus |
| Team holds 20%+ supply | High | Etherscan top holders |
| No audit | High | Project documentation, CertiK |
| Anonymous team | Medium-High | LinkedIn, GitHub, past projects |
| Unrealistic promises | High | Common sense |
What to Do If You Are in a Rug Pull
- Sell immediately if you still can — even at a loss, partial recovery is better than total loss
- Revoke all token approvals from the project using Revoke.cash
- Report the project on CertiK Skynet, TokenSniffer, and relevant chain explorers
- Document everything (transactions, team communications) for potential legal action
Frequently Asked Questions
Is this guide still accurate in 2026?
Yes. While specific attack vectors evolve, the fundamental security principles — hardware wallets, 2FA, verified platforms, due diligence — remain the same. We update our guides regularly.
What is the safest way to store crypto?
A hardware wallet (Ledger Nano X or Trezor Model T) with seed phrase backed up on metal plates in multiple locations. For trading funds, use regulated exchanges with proof-of-reserves.
Can I recover stolen crypto?
In most cases, no. Blockchain transactions are irreversible. Some law enforcement agencies have crypto investigation units, but recovery is rare. Prevention through security best practices is essential.
Which exchanges are safest?
Exchanges with proof-of-reserves, regulatory licenses, insurance funds, and clean security records. Coinbase, Kraken, and Binance lead in these categories. PrimeXBT has operated since 2018 without breaches.