What a rug pull means
A rug pull is a crypto scam in which the people running a token, liquidity pool, or decentralized finance project take the funds backing it and walk away, leaving everyone else holding an asset that has lost most or all of its value. The name comes from the idea of pulling a rug out from under someone: the ground investors thought they were standing on disappears without warning.
Rug pulls happen because decentralized projects often let a small team, or a single wallet, control the liquidity, the contract, or the token supply that gives the asset its value. When that control sits with people who never intended to build anything lasting, removing it is trivial and fast, sometimes over in a single transaction.
How a rug pull works in practice
Most rug pulls follow a similar shape. A team launches a token and pairs it with a real cryptocurrency in a liquidity pool, which is what lets people buy and sell it. They promote the project to attract buyers and push the price up. Once enough outside money has flowed in, the team withdraws the paired cryptocurrency from the pool, sells a large pre-allocated share of the token supply, or both, and the price collapses toward zero almost immediately.
There are two common variations. A hard rug pull uses code, an unlocked liquidity pool, or a hidden minting or ownership function, to drain funds directly and quickly. A soft rug pull is slower: the team simply stops developing the project, sells its holdings gradually, and goes quiet, which is harder to prove in the moment but has the same effect on anyone who bought in.
Warning signs to look for
None of the signs below proves on its own that a project is a rug pull, but the more of them that appear together, the higher the risk, and this is also how to spot a rug pull before you commit funds rather than after.
- An anonymous or unverifiable team with no track record that can be checked
- Liquidity that is not locked, or locked for a suspiciously short period
- A small number of wallets holding most of the token supply
- Contract functions that let the owner mint new tokens, pause trading, or blacklist wallets
- Aggressive pressure to buy quickly, paired with promises of guaranteed returns
- No independent audit, or an audit that cannot be verified against the deployed contract
What to do if you are targeted
If a project has already pulled its liquidity or its team has disappeared, there is usually no built-in way to reverse the transaction or recover the funds directly from the project itself. Stop sending any further money, including to anyone who contacts you afterward offering to recover your funds for an upfront fee, which is a separate and common follow-up scam that targets people who already lost money once.
Save the contract address, the transaction history, and any promotional material before it is deleted, since this is what you will need if you report the project to the platform where you found it or to your exchange. Before putting more money into a similar project, it helps to check the wallet addresses involved with a wallet checker and to run the project's website through a website checker, so that ownership signals, liquidity claims, and site history can be reviewed before you commit funds rather than after.
How TrustSniffer checks for this
TrustSniffer's analysis draws on a large base of prior checks: we have published analyses for 5274 websites and assessed 17168 cryptocurrency wallet addresses, which is what our website and wallet checks are built from. When you run a project's site or a wallet through TrustSniffer, we look at the same categories of evidence described above, ownership and history signals for the site, and holding and transaction patterns for the wallet, and we surface what we find rather than hand you a single unexplained label.
You can browse previously flagged entities in the sanctions directory, or see the current picture across everything TrustSniffer has analyzed on the Risk Index. Neither replaces your own judgment, but both give you a starting point before you decide whether a project is worth the risk.
