A rug pull occurs when project operators abandon users by removing liquidity, minting tokens, or exercising hidden admin powers. Spotting early warning signs reduces exposure—but no checklist eliminates all scam risk.
Token and contract red flags
- Unlimited or hidden mint functions controlled by a single key
- Blacklist or transfer-tax functions that can trap holders
- Proxy upgrades without timelock or public governance
- Concentrated holder distribution with opaque team wallets
Liquidity and market structure
- Unlocked or short-duration liquidity pools
- Deployer retains majority LP tokens without vesting
- Artificial volume or wash trading patterns
- Pressure to buy before "listing" without verifiable contracts
Team and disclosure signals
- Anonymous teams with no track record or verifiable prior work
- Copied documentation, fake audit badges, or mismatched report dates
- Aggressive referral or guaranteed-return marketing
- No clear incident contact or disclosure policy
Defensive habits for investors
Start with small allocations, verify contract source on block explorers, read audit reports independently, and never invest based on social momentum alone. If something feels urgent or too good to be true, pause and review.