A rug pull scam is a malicious scam in the cryptocurrency and Web3 ecosystem where developers launch a seemingly legitimate project, hype it up to attract investor capital, and then suddenly drain all liquidity or abandon the project, leaving investors with worthless tokens. The idiom comes from the phrase “pulling the rug out from under someone“, suddenly removing support so everything collapses.
Common Types of Rug Pulls
- Liquidity Stealing (Decentralized Exchanges): Creators mint a new token, pair it with a major crypto (like ETH or USDT) in a decentralized exchange (DEX) liquidity pool, drive up demand, and then withdraw all the paired real crypto from the pool.
- Honeypot Exploits: Scammers code the token’s smart contract so that investors can buy the token, but malicious logic prevents anyone except the developers from selling it.
- Limiting Sell Orders / Price Manipulation: Developers hold a massive majority share of the tokens. Once hype inflates the price, they dump their entire allocation at once, causing the token value to crash to near zero instantly.
Red Flags to Watch For
- Unlocked Liquidity: If the project’s liquidity pool is not locked via a trusted smart contract, developers can drain it at any time.
- Anonymous or Unverified Team: Founders who hide behind anonymous avatars without a verifiable track record carry higher risk.
- Unrealistic Promised Yields: High APYs (e.g., thousands of percent interest) designed to induce FOMO (Fear Of Missing Out).
- Unverified Smart Contracts: Lack of a reputable third-party security audit (from firms like CertiK, OpenZeppelin, or Hacken).
