Topic Terms

What is a Rug Pull in Crypto?

A rug pull is a crypto scam where project developers secretly drain a token's liquidity pool or treasury and disappear with investor funds, leaving the token worthless — one of the most common forms of fraud in decentralized finance and NFTs.

A rug pull is a type of cryptocurrency exit scam in which developers build up a project, attract investor funds, and then abruptly abandon it — "pulling the rug" out from under investors by draining the liquidity, selling developer-held tokens en masse, or simply disappearing with raised funds. Investors are left holding tokens with no value and no recourse.

Rug pulls are especially common in decentralized finance (DeFi) and NFT projects, where smart contract deployment is easy, often anonymous, and difficult to reverse. The decentralized and pseudonymous nature of blockchain technology makes rug pulls hard to prosecute and nearly impossible to recover from once executed.

How Rug Pulls Work

There are several common mechanics behind rug pulls:

Liquidity Pool Drain

This is the most common DeFi rug pull. Developers create a new token and add it to a liquidity pool on a decentralized exchange (DEX) like Uniswap. As traders buy the token, the liquidity pool fills with valuable assets (usually ETH or stablecoins). The developers then withdraw all liquidity in a single transaction — leaving buyers unable to sell their tokens because there's nothing to trade against.

Developer Token Dump

Developers hold a large, often undisclosed portion of the total token supply. After the project gains traction and the price rises, they sell all of their tokens simultaneously — crashing the price and leaving other investors unable to exit.

Mint Function Exploitation

If a smart contract contains a hidden or poorly audited mint function, developers can create unlimited new tokens at any time, dilute the supply, and drain value from existing holders.

Red Flags to Watch For

Recognizing rug pull warning signs before investing is the primary defense:

  • Anonymous team — No public, verified identities behind the project
  • Unaudited smart contracts — Legitimate projects publish audits from reputable security firms; unaudited contracts may contain hidden backdoors
  • Locked liquidity not verifiable — Serious projects lock liquidity for a defined period using a time-lock contract; if you can't verify this, assume it can be drained at any time
  • No clear use case — Tokens marketed purely on hype, memes, or celebrity endorsements without a real product or roadmap
  • Suspicious token distribution — If team wallets hold 30–50%+ of total supply, a dump is possible at any time
  • Promises of guaranteed returns — A common trait of fraudulent projects across all investment types
  • Sudden surge in social media activity — Coordinated pumping on Telegram, Twitter/X, or TikTok before a dump is a classic pattern
  • FOMO urgency — "Limited time," "launch in 24 hours," artificial scarcity in marketing

Famous Rug Pulls

  • Squid Game Token (SQUID, 2021) — A token exploiting the Netflix show's popularity; developers drained approximately $3.38 million. Investors could buy but literally could not sell due to code restrictions.
  • AnubisDAO (2021) — Raised ~$60 million in ETH, then all funds were transferred out 20 hours after launch
  • Frosties NFT (2022) — One of the first rug pulls to result in federal charges; developers raised $1.3 million, shut down the project, and were later arrested

How to Protect Yourself

  1. Research the team — Doxxed (publicly identified) founders have more to lose from fraud
  2. Read the smart contract audit — Look for reports from firms like CertiK, Hacken, or Trail of Bits; check what was found
  3. Verify locked liquidity — Use tools like Team Finance or Unicrypt to confirm liquidity lock status and duration
  4. Check token distribution — On-chain tools (Etherscan, BscScan) let you see wallet concentration
  5. Start small — Never invest more in a new, unproven project than you're comfortable losing entirely
  6. Treat hype as a warning sign — In crypto, extreme short-term hype is correlated with scam activity

Rug pulls are a reminder that in decentralized environments, the traditional investor protections — regulatory oversight, licensed intermediaries, fraud liability — largely don't apply. The responsibility for due diligence falls entirely on the investor.

Related Terms