Rug Pull
A rug pull is a crypto scam in which a project's creators suddenly withdraw all liquidity from a trading pool, or dump their own token holdings, crashing the price to near zero. Victims are left holding worthless tokens. Rug pulls are among the most common forms of crypto fraud in DeFi and NFT markets.
How a Rug Pull Works
The name comes from the idiom "pulling the rug out" — the floor disappears instantly and without warning. In its most common form, a token's creators pair it with a legitimate asset (often ETH or a stablecoin) in a liquidity pool on a decentralised exchange, let trading and hype build for days or weeks, then withdraw their entire share of the pool in a single transaction, leaving buyers with a token that can no longer be sold for anything of value.
Common rug pull variants
A hard rug pull happens instantly and irreversibly, typically through a liquidity-pool drain. A soft rug pull is slower and technically legal in a narrow sense: developers simply abandon the project, stop development, and quietly sell their own holdings over time, letting the price bleed out gradually rather than crashing in one move. Both produce the same outcome for holders.
Warning signs before it happens
Anonymous, unverifiable teams; liquidity that isn't locked in a time-locked contract (locked liquidity can't be withdrawn instantly); a token contract retaining functions that let the owner mint unlimited new supply or disable selling; and marketing that leans heavily on urgency and guaranteed returns are all recurring patterns across documented rug pulls.
Why Rug Pulls Matter for Your Crypto Security
Rug pulls specifically target the fear of missing out on early-stage gains, pushing buyers to skip due diligence they'd normally apply. Checking whether liquidity is locked, whether the contract is verified and audited, and whether the team has any verifiable track record takes only minutes and catches the overwhelming majority of rug pull setups before funds are ever at risk.
A Typical Rug Pull Timeline From the Buyer's Side
A common scenario starts with a new token announced in a social media channel or group chat. The project has a polished website, a roadmap and an active community, and early buyers post screenshots of rising prices. A newcomer buys in, often with money they intended to hold for something else. For a while the chart goes up. Then the price drops to near zero in a few minutes, the chat is closed or filled with deleted messages, and the sell button stops working or returns almost nothing.
Looking at the chain afterwards usually tells the story clearly. The creator wallet removes liquidity or sells a large block of tokens, then moves the proceeds through several intermediate addresses, sometimes into a mixer or a cross-chain bridge, and finally towards an exchange deposit address. Each of those steps leaves a visible record, which is why tracing is possible even when the team is anonymous.
What To Do After a Rug Pull and What Not To Do
First, stop adding money. A token that has collapsed does not come back because you buy more, and people who contact you offering to restore the price or recover the investment for an upfront fee are very often running a second scam. Save the token contract address, your own transaction hashes, screenshots of the project's promises and any messages from the team. Revoke token approvals you granted to the project's contracts so that nothing further can be taken from your wallet.
Realistically, recovery from a rug pull is difficult. Funds can sometimes be traced to an exchange where an account holder can be identified, and a legal complaint with a clear evidence package gives investigators something to work with, but results depend on the jurisdiction, the speed of reporting and where the money ended up. A calm, documented report is more useful than public accusations, and no honest service can guarantee that money will return.
Frequently Asked Questions
Can funds lost in a rug pull be recovered?
Recovery odds are generally low because the token itself becomes worthless and there's often no direct victim-to-perpetrator transaction to reverse. If the perpetrators later move the drained liquidity to a KYC-verified exchange, blockchain tracing combined with a legal complaint can sometimes create leverage, but success isn't guaranteed.
How can I check if a token's liquidity is locked?
Liquidity-locking services (like Team.Finance or Unicrypt) publish public verification pages showing the lock duration and the locked contract address, which you can look up before investing. No lock, or a very short one, is a significant red flag.
What's the difference between a rug pull and a honeypot?
A honeypot blocks selling from the moment it's deployed — there was never a real exit. A rug pull allows normal trading for a period, building trust and price momentum, before the creators pull liquidity or dump holdings all at once.
Is a rug pull always illegal?
It depends on the facts and the country. Deliberately deceiving buyers to take their money is generally treated as fraud, while a project that simply fails or loses momentum is not. Investigators look at what the team promised, what the code allowed and how the funds were moved.
Can I get my money back after a rug pull?
Sometimes part of it can be traced and pursued, but there is no guarantee. Report quickly, keep all transaction records, revoke approvals and avoid anyone who asks for a fee upfront to retrieve the funds.