Rug Pulls: The Most Common Crypto Scam
What they are, how they work, and how to protect yourself.
What is a Rug Pull?
A "rug pull" is when crypto project developers suddenly abandon a project and run away with investors' funds. The name comes from the phrase "pulling the rug out from under someone."
These scams are particularly common in:
- New tokens on decentralized exchanges (DEXs)
- DeFi protocols offering high yields
- NFT projects that never deliver
- Meme coins created to capitalize on trends
Types of Rug Pulls
Liquidity Pull
Developers add initial liquidity to a DEX, wait for investors to buy in, then remove all liquidity—making the token worthless and unsellable.
- Create a token and add it to Uniswap/PancakeSwap with ETH/BNB
- Hype the token on social media, fake partnerships
- Wait for price to pump as people buy
- Remove all ETH/BNB liquidity, leaving holders with worthless tokens
Sell Restriction (Honeypot)
The token's code is designed so only the creator can sell. You can buy, but you can never sell—your tokens are trapped.
- You can buy but transactions fail when selling
- Unverified contract on Etherscan/BscScan
- Contract has unusual transfer restrictions
Dump Scheme
Developers hold a massive percentage of tokens, hype the project, then dump their holdings all at once—crashing the price.
- Top 10 wallets hold >50% of supply
- No vesting schedule for team tokens
- Tokens unlocked from day one
Slow Rug
Instead of a sudden exit, developers slowly drain funds over time through high "taxes," fake expenses, or gradual selling.
- Frequent delays on promised features
- Team constantly "needs more funding"
- Marketing wallet draining slowly
- Roadmap keeps changing
Warning Signs to Watch For
Notable Rug Pulls
These high-profile cases show how sophisticated rug pulls can be. Even experienced investors fell for them.
Squid Game Token (2021)
$3.4M stolenCapitalized on Netflix show hype. Honeypot prevented selling. Rose 23,000,000% before developers drained liquidity.
Frosties NFT (2022)
$1.3M stolenPromised rewards and metaverse integration. Sold out, then developers deleted Discord and Twitter, disappeared with funds. Founders later arrested.
AnubisDAO (2021)
$60M stolenOlympusDAO fork that never launched. Raised ETH in a sale, then funds were drained hours later through a "compromised" wallet.
Luna Yield (2021)
$6.7M stolenSolana yield aggregator. Marketed heavily, audit published, then development wallet drained all funds.
How to Protect Yourself
Research the team
Are they doxxed? Can you find their LinkedIn? Have they built anything before?
Check liquidity lock
Use tools like Mudra, Team Finance, or Unicrypt to verify liquidity is locked for at least 6-12 months.
Audit the token
Use Token Sniffer, GoPlus, or Honeypot.is to check for malicious code.
Check holder distribution
If top wallets hold >20% (excluding contracts), the risk of a dump is high. Check on block explorers.
Never invest more than you can lose
New tokens are extremely high risk. Treat any investment as gambling money.
Watch for manufactured hype
Bots, paid shillers, fake partnerships, and celebrity endorsements are common tactics.
Research Tools
Before You Invest in Any Project
Use our interactive checklist to evaluate if a crypto project is legitimate.
Check Project Legitimacy