What Is a Rug Pull in Crypto? Warning Signs Explained

A rug pull is a scam in which the creators of a crypto token or project build up investor trust and price momentum, then abruptly withdraw funds — either by draining the liquidity pool or by dumping their own token holdings — leaving other holders with a worthless or near-worthless asset. The term comes from "pulling the rug out" from under buyers who had no warning it was coming.

Rug pulls are one of the most common forms of crypto fraud precisely because they're cheap to execute and hard to prosecute: anyone can deploy a token contract and create a liquidity pool in minutes, with no identity verification required on most decentralized exchanges. That low barrier to entry is also what makes DeFi powerful — see our explainer on what DeFi is — but it cuts both ways.

How a liquidity-pull rug pull works

Most decentralized exchanges use liquidity pools: pairs of tokens (say, a new token and ETH) locked in a smart contract that lets anyone trade between them. When a project launches, its founders typically supply both sides of that pool themselves — they deposit the new token plus some real, valuable asset like ETH or a stablecoin.

The rug happens when the founders, who usually hold the liquidity provider (LP) tokens representing their share of the pool, withdraw their side of the pool. Because they typically control the vast majority of the pool, this withdrawal empties nearly all of the real, valuable asset out of the trading pair. What's left is the worthless project token trading against almost nothing, and its price effectively collapses to zero in a single transaction. Anyone who bought in cannot sell for meaningful value because there's no liquidity left to sell into.

Soft rugs: the slower version

Not every rug pull is a single dramatic transaction. A soft rug happens when the team doesn't drain the pool outright but instead abandons the project quietly — stops development, disappears from community channels, and quietly sells (dumps) their large token allocation into the market over time. The effect on holders is the same — the token's value evaporates — but it happens gradually enough that it can be harder to identify as a scam versus a project that simply failed. Both liquidity-pull and soft rugs are examples of the broader category covered in our roundup of common DeFi scams.

Warning signs in tokenomics

Certain patterns in how a token is structured correlate strongly with rug pull risk:

• Unlocked liquidity. If the liquidity pool tokens are sitting in the deployer's own wallet rather than locked in a time-locked contract or burned, nothing stops an immediate withdrawal.
• Large team/insider allocation. If founders and early insiders hold a large percentage of total supply (with no vesting schedule), they can dump on the market at will, crashing the price even without touching liquidity.
• Anonymous team with no track record. Anonymity isn't automatically disqualifying in crypto, but combined with other red flags it removes any accountability if things go wrong.
• Unverified or unusual contract code. A token contract that isn't verified on a block explorer, or that includes functions letting the owner mint unlimited new tokens, block specific wallets from selling, or change trading fees arbitrarily, hands the deployer tools to manipulate or drain the project at will.
• Aggressive, hype-driven marketing with no product. Heavy promotion of price and community size, with little discussion of what the token or protocol actually does, is a common pattern preceding a rug.

Rug pull types compared

Type	Mechanism	Speed	Detectability before it happens
Liquidity-pull rug	Team withdraws pooled assets directly	Instant	Check if LP tokens are locked/burned
Soft rug	Team abandons project, dumps holdings gradually	Days to months	Watch for stalled development, insider selling
Malicious contract rug	Owner functions used to mint, block sells, or change fees	Instant or gradual	Read contract functions or use a contract-scanning tool

How to protect yourself

Before buying any new or low-cap token, check whether liquidity is locked (many locking services publish verifiable lock durations), look at the wallet distribution to see how concentrated holdings are among a few addresses, and check whether the contract has been audited or at least has verified, readable source code. None of these checks are foolproof — a locked liquidity pool with a long duration is still a positive signal, but a determined scammer can build convincing fakes of any single signal. Our guide on how to spot a rug pull before investing walks through a fuller pre-investment checklist, and general DeFi wallet security practices reduce your exposure regardless of which specific scam you encounter. The glossary entry on smart contracts is a useful primer if contract-reading terminology is new to you.

Bottom line

A rug pull isn't a bug in DeFi — it's a predictable outcome of anonymous, permissionless token creation combined with concentrated control over liquidity or supply. The good news is that the mechanics are learnable: locked liquidity, distributed and vested token allocations, verified contracts, and an identifiable team are the difference between a project that can rug and one that structurally can't. Treat any token missing more than one of these as a high-risk bet, not an investment.