A rug pull is a scam where a project team builds hype, attracts investment (usually into a token or liquidity pool), then suddenly withdraws all funds and disappears. The rug is the liquidity or treasury that gets pulled from under investors. You are left holding worthless tokens with no buyers, no liquidity, and no recourse.
What Is a Rug Pull?
3 min read
The short version
A rug pull is the crypto version of a con artist setting up a fake store, collecting money from customers, then vanishing overnight. They build a convincing front (website, token, community hype), get people to deposit real money, and then drain everything they can access. By the time victims realize, the money is gone and the team is anonymous.
How It Works
Common rug pull methods: (1) Liquidity removal: team creates a token, pairs it with ETH in a DEX pool, hypes the token price, then removes all the ETH liquidity. Token price crashes to zero instantly. (2) Minting exploit: team retains an admin function to mint unlimited tokens, dumps them on the market, draining all value. (3) Sell-only trap (honeypot): contract allows buying but blocks selling for everyone except the deployer. Buyers cannot exit while the team sells freely. (4) Slow rug: team gradually sells their allocation over weeks while maintaining community engagement, exiting before anyone realizes. Warning signs: anonymous team with no track record, unaudited contracts, admin keys that can drain pools, locked liquidity for suspiciously short periods (or none at all), unrealistic return promises, and heavy marketing with no working product.
The Squid Game Token rug (November 2021)
During the Netflix show's popularity, anonymous developers launched SQUID token. It rose 23,000,000% in days to $2,861/token. Red flags present: holders could not sell (anti-dump mechanism that only let developers sell), anonymous team, no audit, extreme marketing hype. On November 1, 2021 at approximately 5:40 AM UTC, the developers sold their tokens and removed all liquidity. Price crashed from $2,861 to $0.0007 in under 5 minutes. Approximately $3.4 million was extracted. Buyers could not sell at any point during the rise. The CoinMarketCap page showed the crash happening in real-time while buyers were still trying to figure out why their sell transactions were reverting.
What People Get Wrong
Rug pulls only happen to small, unknown tokens
While most common with micro-cap tokens, larger projects have rugged too. AnubisDAO ($60M in 2021), Meerkat Finance ($31M), and various NFT projects with thousands of holders have all executed exit scams. Size does not guarantee safety.
If a token is on a major DEX, it is safe
Anyone can create a token and list it on Uniswap or PancakeSwap with zero approval process. Being tradeable on a DEX means nothing about legitimacy. Only centralized exchanges with listing standards provide any vetting, and even that is not foolproof.
Locked liquidity means you cannot get rugged
Liquidity locks help but are not a guarantee. Teams can: lock for very short periods (unlock and rug later), retain admin minting functions that bypass the pool entirely, or use contracts that appear locked but have hidden withdrawal functions.
You can get your money back after a rug pull
In the vast majority of cases, no. Blockchain transactions are irreversible. Anonymous teams cannot be identified or sued. Law enforcement has low success rates pursuing cross-border crypto fraud. Consider any money sent to an unvetted project as at full risk.
Keep Reading
Sources & Further Reading
- Token Sniffer
Automated token contract analysis that checks for common scam patterns
- RugDoc
Community-driven DeFi risk assessment and scam identification
Questions People Also Ask
- How do I spot a potential rug pull?
- Red flags: anonymous team, no audit, admin functions in the contract (check Etherscan), liquidity unlocked or locked for very short periods, unrealistic APY/return promises, heavy paid marketing with no product, contract not verified on Etherscan, and inability to sell (test with a tiny amount first).
- Are rug pulls illegal?
- Yes, in most jurisdictions they constitute fraud or theft. However, enforcement is difficult: anonymous teams, cross-border transactions, and the speed of crypto make prosecution rare. Some cases have been prosecuted (the SEC has charged several rug pull operators), but victims rarely recover funds.
- Can smart contract audits prevent rug pulls?
- Audits can identify obvious backdoors (admin mint functions, liquidity drain functions). But a clean audit only means the code does what it says at the time of audit. A team can deploy a different contract than the one audited, or the social layer (team disappearing) is not something code audits address.