What is a Rug Pull in Crypto? How They Work and How to Avoid Them

A rug pull is when a crypto project's creators drain the liquidity pool or dump their token holdings, leaving everyone else with worthless tokens. The name comes from the idea of pulling the rug out from under investors.

In 2026, rug pulls account for roughly 35% of all crypto scam losses — about $500 million in the first six months alone. They happen across every chain, every day, and most follow the same playbook.

How a rug pull works

The typical rug pull follows a predictable pattern. Understanding it is your best defense.

• Deploy a token — the scammer creates a new token contract on BSC, Ethereum, or Solana. Cost: under $5 on BSC.
• Add liquidity — they create a trading pair (usually token/WBNB or token/SOL) on a DEX like PancakeSwap or Raydium.
• Generate hype — social media posts, Telegram groups, paid influencers, fake trading volume via wash trading bots.
• Wait for buyers — real traders see the pumping chart and buy in, adding their money to the liquidity pool.
• Pull the rug — the deployer removes all liquidity from the pool, converting everyone's investment into their own BNB/ETH/SOL. Token price goes to zero instantly.

Types of rug pulls

Not all rug pulls are the same. Some are fast and obvious, others are slow and hard to detect.

• Liquidity pull — the classic. Deployer removes LP tokens and drains the pool. Instant price collapse.
• Slow rug — the team sells their tokens gradually over days or weeks. Price declines slowly. Harder to spot because it looks like normal market activity.
• Mint rug — the contract has a mint function the owner uses to create billions of new tokens and dump them on the market.
• Honeypot rug — buyers can't sell at all. The deployer is the only one who can sell. The chart pumps forever because sells are blocked.
• Upgrade rug — a proxy contract that starts as legitimate. The owner later upgrades the contract logic to enable draining.

Warning signs of a rug pull

Most rug pulls leave on-chain evidence before they execute. These are the signals DexScanner checks automatically:

• LP not locked — if the deployer can withdraw liquidity at any time, the rug can happen any second. This is the single biggest red flag.
• Owner not renounced — active ownership means the deployer can change rules, mint tokens, blacklist wallets, or pause transfers.
• High holder concentration — if the top 10 wallets hold 70%+ of supply, a coordinated dump will destroy the price.
• Mint function active — the owner can print unlimited tokens and sell them, diluting everyone else.
• No source code verification — closed-source contracts hide their real behavior. If you can't read it, you can't trust it.
• Deployer has a rug history — serial ruggers reuse wallets. Check how many other contracts the deployer has created.
• Very new contract — tokens under 24 hours old with no track record carry the highest risk.

How to protect yourself

You don't need to be a smart contract auditor. You need a 5-second habit before every buy.

• Scan before you buy — paste the contract address into DexScanner. If the score is below 40, don't buy.
• Check LP lock — is liquidity locked? For how long? Below 70% locked is a risk.
• Check ownership — is the owner renounced? Can they reclaim ownership after renouncing?
• Check holder distribution — top 10 wallets holding more than 50% = concentration risk.
• Don't trust hype — Telegram shills, Twitter influencers, and "1000x gem" calls are marketing, not due diligence.
• Never invest more than you can lose — even scanned, audited tokens can fail for reasons nobody predicted.

Which chains have the most rug pulls?

BSC (BNB Chain) leads by volume because deploying a token costs almost nothing. Ethereum has fewer but they involve larger amounts. Solana saw a massive surge during the 2024-2025 memecoin boom, especially through pump.fun launches.

DexScanner covers all three and 26 more chains — 29 total. Same scan, same scoring algorithm, any chain.