A rug pull is when a token's creators abandon the project and take investors' money, usually by draining the liquidity pool, dumping a large token allocation, or disabling sells so buyers cannot exit. The name comes from pulling the rug out from under buyers: the value disappears suddenly and the price collapses.

How can I tell if a token will rug pull?

Check whether liquidity is locked or burned, how concentrated the holdings are, whether the owner can still mint supply, and whether ownership is renounced. Unlocked deployer-held liquidity plus concentrated holdings and active owner powers is the classic rug setup. A contract scanner automates all of these checks in one step.

What is the difference between a rug pull and a honeypot?

A honeypot blocks you from selling (the trap is in the contract's transfer logic). A rug pull removes the value itself: the team drains liquidity or dumps supply. A honeypot is one way to execute a rug, but most rugs are liquidity removals or coordinated dumps. See our honeypot guide for the sell-side trap specifically.

Can a rug pull happen after liquidity is locked?

Locked liquidity reduces the hard-rug risk for the lock duration, but it is not a guarantee. The team can still slow-rug by dumping their own token allocation, raise taxes, or pull liquidity once the lock expires. Always check the lock duration and the holder distribution, not just whether a lock exists.

Are rug pulls illegal?

In many jurisdictions a rug pull is fraud or theft, and there have been prosecutions. But enforcement is slow, cross-border, and often impossible when the team is anonymous. On-chain, funds are usually unrecoverable once moved, which is why pre-purchase verification matters far more than after-the-fact recourse.

Guide · Token security

What is a rug pull
and how to spot one

A rug pull is when a token's creators drain the value and disappear, leaving holders with nothing. Here are the types, the warning signs, and how to verify any token's liquidity, holders, and permissions with live on-chain data before you buy.

Scan a token now

Free · No sign-up · EVM · Bitcoin · Solana · Tron

Every scan is powered by the XemaS Semantic Intelligence Platform · answers carry their evidence and coverage state

The scam

What is a rug pull?

A rug pull is an exit scam: a token's creators attract buyers, then take the money and abandon the project. The classic move is draining the liquidity pool so the token can no longer be sold, but a rug can also be a slow dump of the team's allocation, a sudden supply mint, or disabling sells outright.

The common thread is control. When a deployer keeps the keys (unlocked liquidity, a large token stash, mint authority, or owner-only functions), they can remove the value at any time. Spotting a rug is about checking who holds that control before you buy, because once the funds move on-chain they are almost never recoverable.

Know the playbook

Types of rug pull

Liquidity pull (hard rug)

The deployer removes the liquidity pool in one transaction. The token instantly becomes unsellable and the price collapses to zero. The fastest and most common rug.

Sell disable / honeypot

Buying works but selling is blocked via a blacklist, 100% sell tax, or a trading flag. Buyers are trapped while the chart climbs.

Dev dump (slow rug)

The team holds a large token allocation and sells into buyer demand over hours or days, bleeding the price down without ever touching liquidity.

Mint-and-dump

The owner retains mint authority, inflates the supply at will, and sells the freshly minted tokens, diluting every holder.

Warning signs

Common rug pull red flags

Unlocked liquidity

The LP is not locked or burned and is held by the deployer. Nothing stops them from withdrawing it the moment enough buyers arrive.

Concentrated holdings

A handful of wallets (often the deployer and connected addresses) hold a large share of supply, pre-positioned to dump.

Active mint authority

The owner can still mint new tokens (an EVM mint function, or a Solana mint authority that is not revoked), letting them inflate and dump supply.

Ownership not renounced

Privileged functions (fees, pause, blacklist, upgrade) remain controlled by an active wallet rather than renounced or behind a timelock.

Anonymous, unaudited team

No verifiable team, no audit, and copy-pasted or unverified contract code: common to throwaway scam launches.

Hype with no substance

Aggressive paid shilling, urgency ("last chance"), and locked or freshly-created socials, with no real product or traction behind the token.

Step by step

How to check a token for rug risk

Check liquidity lock and depth

Confirm the LP is locked or burned, for how long, and that it is deep enough to matter. Unlocked deployer-held liquidity is the single biggest rug vector.

Check holder distribution

Look at the top holders. If the deployer or a few wallets hold a large percentage, a coordinated dump can tank the price regardless of liquidity.

Check supply controls

Verify mint authority is revoked (Solana) or there is no owner-callable mint (EVM), so the supply cannot be inflated out from under you.

Check ownership and permissions

Is ownership renounced or behind a timelock or multisig? Active owner powers (fees, pause, blacklist, proxy upgrade) are all post-launch rug levers.

Scan the full contract

Resolve all of the above into one verdict (liquidity, distribution, supply, ownership, and sell-simulation) instead of checking each by hand.

What a verdict looks like

One scan, every signal

Instead of inspecting liquidity, holders, and permissions separately, XemaS resolves them into a single evidence-backed verdict.

Contract verdict

ExampleToken (EVM)

HIGH RISK

Liquidity lockUnlocked

Top-10 holders82% of supply

Mint authorityActive

OwnershipActive EOA owner

Deployer wallet reuseHigh

Verdict: unlocked liquidity, concentrated supply, and active mint authority. The deployer can exit at any time. Coordinated-exit risk is high. Do not enter.

Illustrative example. Run a real token to see its live verdict.

Before you trade

Scan it, then watch it

Get an instant liquidity, holder, and permissions verdict, then monitor the token for the coordinated-exit signals that precede a rug. Free, no account required to scan.

Create free account

FAQ

Rug pull questions, answered

Token Security

All Token Security guides

What is a rug pulland how to spot one