What is a Rug Pull in Crypto? How to Spot One Before You Lose Everything
by AK Arora 
The chart was going vertical.
Every Telegram group was screaming about it. Influencers were posting screenshots of their gains. The project had a slick website, a detailed whitepaper, celebrity endorsements. The community Discord had 50,000 members. The token had 10x’d in 48 hours.
Then — in the span of about four minutes — the price went from $2,900 to effectively zero.
The developers vanished. The website went offline. The Discord disappeared. Tens of thousands of wallets were left holding worthless tokens.
That was the Squid Game Token — November 2021. $3.38 million stolen in minutes. One of the most famous rug pulls in crypto history — and a masterclass in how these scams work.
In 2026, over 5,000 new tokens launch every single day across Ethereum, Solana, Base, and BSC. In the first six months of 2026 alone, investors lost approximately $500 million to fraud — with rug pulls accounting for approximately 35% of all crypto scam losses.
If you invest in any crypto beyond major established coins — understanding rug pulls is not optional. It is survival.
What is a Rug Pull?
A rug pull is a crypto scam where developers create a token, attract buyers to pump the price, then drain the liquidity pool or dump their holdings — leaving investors with worthless tokens and no way to recover their money.
The name comes from the phrase “pulling the rug out from under someone” — suddenly withdrawing support and leaving someone in an impossible position. In crypto, that impossible position means holding a token that cannot be sold, in a project that no longer exists, with developers who are completely unreachable.
Rug pulls became particularly prevalent with the rise of DeFi platforms starting around 2020. The ease of creating tokens on blockchain networks like Ethereum, combined with minimal regulatory oversight, created an environment where malicious actors could launch projects, attract investment, and vanish within days.
How a Rug Pull Works — Step by Step
Understanding the mechanics helps you recognize the pattern before it plays out:
Step 1 — Token Creation Creating a new token is cheap and easy. On Solana, it costs under $1. On Ethereum, a few hundred dollars. Anyone can do it in minutes.
Step 2 — Building Hype The scammers create a compelling narrative. A revolutionary DeFi protocol. A play-to-earn game. A community-owned project. They build a website, write a whitepaper, create social media accounts, and start building buzz.
Step 3 — Liquidity Injection The team adds liquidity to a decentralized exchange (DEX) like Uniswap or PancakeSwap — pairing their new token with ETH or BNB. This allows the token to be traded.
Step 4 — Marketing and FOMO Paid influencers promote the project. Telegram groups pump it. Social media fills with screenshots of gains. Fear of missing out drives new buyers in.
Step 5 — Price Pumps As more people buy, the price rises. The chart looks impressive. More FOMO brings more buyers. The cycle accelerates.
Step 6 — The Pull At the peak — the developers drain the liquidity pool, dump all their tokens, or exploit a backdoor in the smart contract. The price collapses instantly to zero.
Step 7 — Disappearance Website goes offline. Discord deletes. Telegram group disappears. Developers vanish. Often in under an hour.
The 3 Types of Rug Pulls
1. Hard Rug Pull — The Premeditated Theft
In a hard rug pull, the project creator fully intends from day one to steal investor funds. The fraud is built into the code itself.
Liquidity theft: The most common form. Developers drain the liquidity pool — removing all the ETH or BNB that makes trading possible. Without liquidity, the token cannot be sold. Investors are left holding worthless tokens with no buyers.
Honeypot contracts: Perhaps the most insidious variant. The smart contract is coded so that anyone can buy — but no one except the developer can sell. The chart pumps dramatically as buyers pour in, unable to exit. The developer sells at the top and disappears.
Mint functions: A hidden backdoor allows the developer to mint unlimited new tokens — immediately dumping them and crashing the price.
2. Soft Rug Pull — The Gradual Exit
A soft rug pull is more subtle — developers slowly dump their tokens over time rather than all at once.
Insider selling: Team members hold large allocations of tokens. They gradually sell — often disguised as “covering development costs” — while maintaining the appearance of an active project. Eventually the price collapses under the selling pressure.
Abandonment: Developers simply stop working on the project. Updates cease. The team goes quiet. The community slowly realizes they have been abandoned. The token value bleeds to zero over weeks or months.
3. Exit Scam — Raise and Disappear
A presale or ICO raises funds from investors. The project launches, achieves minimal milestones to maintain credibility, continues raising money — then suddenly disappears with all raised funds.
Famous Rug Pull Cases
Squid Game Token — $3.38 Million (November 2021)
The most infamous rug pull in history rode the hype of Netflix’s globally popular Squid Game series.
The token surged from fractions of a cent to nearly $2,900 in days — a staggering chart that attracted global attention. The project promised a play-to-earn game based on the show.
The catch: investors discovered they couldn’t sell their tokens due to restrictions embedded in the smart contract — a classic honeypot. When the price peaked, developers drained $3.38 million from the liquidity pool and disappeared. The website and social media accounts vanished overnight.
The Squid Game Token is now the textbook example of a honeypot rug pull.
AnubisDAO — $60 Million (October 2021)
AnubisDAO raised $60 million in under 20 hours — then the funds were drained from the liquidity pool just hours later. No warning. No explanation. $60 million gone.
Uranium Finance — $50 Million (April 2021)
The DeFi protocol was exploited through a bug in its migration contract — draining $50 million from users. Whether intentional or negligent, the result was identical.
$LIBRA — Javier Milei Connection (February 2025)
Argentine President Javier Milei promoted a token called $LIBRA on social media. The price surged dramatically as retail investors bought in — then the price crashed 95%+ as insiders dumped their holdings. A clear pump-and-dump that affected thousands.
10 Red Flags — How to Spot a Rug Pull Before It Happens
In 2026, 70% of all rug pull projects used aggressive marketing to lure victims. Here is what to look for:
Red Flag 1 — Anonymous Team
The most important warning sign. If you cannot verify who built a project — you have no accountability mechanism. When things go wrong (and they often do), there is no one to hold responsible.
Exception: Established anonymous projects like early Bitcoin have proven track records. New anonymous projects have none.
Red Flag 2 — Locked or Unlocked Liquidity
Check whether the project’s liquidity is locked in a time-locked contract (like Team Finance or Unicrypt) — and for how long.
Unlocked liquidity = developers can drain it instantly at any time.
If liquidity is “locked” for only 30-90 days — that’s barely enough time to pump and exit.
Red Flag 3 — Concentrated Token Holdings
Go to Etherscan or BscScan. Check the “Holders” list. If one or a few wallets hold 20%+ of the total supply — that is a serious red flag.
A single whale dump can crash the price completely. Scammers often hold the majority of tokens under multiple wallets that trace back to the same source.
Red Flag 4 — No Smart Contract Audit
Reputable projects get their smart contracts audited by firms like CertiK, Hacken, or Trail of Bits before launch. No audit means unverified code with potentially hidden backdoors.
Note: Fake audit badges exist. Always verify directly on the auditing firm’s official website.
Red Flag 5 — Honeypot Contract
Use free tools like Token Sniffer, RugDoc, or DEXTools before buying any new token. These tools simulate buying and selling — revealing whether you can actually sell the token or whether it’s a honeypot.
Red Flag 6 — Unrealistic Returns
“1000% APY.” “10x guaranteed.” “Passive income forever.” These promises are not financial innovation — they are bait.
According to 2026 statistics, promises of guaranteed gains or 1000% returns are the single most common lure in rug pull projects.
Red Flag 7 — Copied Whitepaper
Many rug pull projects copy whitepapers from legitimate projects. Run sections through plagiarism checkers. Check if the described technology actually matches what is coded.
Red Flag 8 — No Real Working Product
A beautiful website is not a product. Ask: does this project have a working application that real users are using? Code commits on GitHub? Actual on-chain activity?
Red Flag 9 — Pressure and Urgency
“Presale ends in 24 hours.” “Limited slots.” “Don’t miss the next 100x.” Artificial urgency is designed to prevent you from doing research.
Red Flag 10 — Paid Influencer Promotion Without Disclosure
When every influencer in your feed is promoting the same token simultaneously — it is almost certainly coordinated paid promotion. Influencer promotion is marketing, not due diligence.
Rug Pull Detection Checklist — Use Before Every Investment
Before buying any new token:
| Check | Tool | What to Look For |
|---|---|---|
| Liquidity lock | Team Finance, Unicrypt | Locked for 1+ year minimum |
| Holder concentration | Etherscan, BscScan | No wallet holds >5% |
| Honeypot test | Token Sniffer, RugDoc | Can you actually sell? |
| Contract audit | CertiK, Hacken | Recent audit from reputable firm |
| Team identity | LinkedIn, GitHub | Verifiable real people |
| Visual holder map | Bubblemaps | Not funded from same source |
| Trading history | DEXTools | Real buy/sell volume, not wash trading |
What to Do If You Suspect a Rug Pull
If you are already holding the token:
- Do not panic sell immediately — check if the token can actually be sold
- Verify on-chain — check if liquidity was drained on DEXTools or Etherscan
- Screenshot everything — wallet addresses, transaction hashes, website, social media
- Report to cybercrime — in India, file at cybercrime.gov.in or call 1930
- Report to blockchain analytics — Chainalysis and similar firms track stolen funds
The brutal truth: In most rug pull cases, recovery is impossible. Blockchain transactions are irreversible. The best protection is never getting in.
Rug Pulls in India — What You Need to Know
India’s rapidly growing crypto community — 119 million users — is an attractive target for rug pull scammers.
Indian investors are particularly targeted through:
- WhatsApp and Telegram groups promoting “the next 100x coin”
- Influencers promoting tokens without disclosure
- Presales promising guaranteed returns
India’s 30% crypto tax makes rug pull losses even more painful — you cannot offset rug pull losses against other crypto gains under Indian tax law.
For complete crypto tax guide: Crypto Tax India 2026
FAQs — What is a Rug Pull in Crypto?
What is a rug pull in crypto?
A rug pull is a crypto scam where developers create a token, build hype to attract investors, then suddenly drain the liquidity pool or dump all their tokens — leaving investors with worthless assets and no way to recover funds.
How much money is lost to rug pulls?
Rug pulls accounted for over $2.8 billion in losses during 2025 alone, representing approximately 35% of all crypto scam losses. In the first half of 2026, investors lost approximately $500 million to fraud across all categories.
What is the most famous rug pull?
The Squid Game Token (November 2021) is the most famous — surging to $2,900 before crashing to zero as developers drained $3.38 million from the liquidity pool. Investors discovered they could not sell due to a honeypot contract.
What is a honeypot contract?
A honeypot is a smart contract coded so that anyone can buy the token, but only the developer can sell. The price pumps as buyers pile in, unable to exit. The developer sells at the top.
How can I tell if a crypto project is a rug pull?
Key red flags: anonymous team, unlocked liquidity, concentrated token holdings in a few wallets, no smart contract audit, unrealistic return promises, and aggressive influencer marketing without disclosure.
Can I recover money lost in a rug pull?
In most cases, no — blockchain transactions are irreversible. Some victims have traced funds through chain analytics and reported to law enforcement, but recovery rates are very low. Immediate reporting to cybercrime.gov.in in India gives the best chance.
What tools can I use to detect rug pulls?
Token Sniffer, RugDoc, and DEXTools for honeypot detection and contract analysis. Bubblemaps for visual holder concentration analysis. Etherscan/BscScan for on-chain verification.
Is every new token a rug pull?
No — but the vast majority of new tokens fail, and a significant percentage are deliberate scams. Stick to projects with verified teams, audited contracts, locked liquidity, and genuine on-chain activity.
Conclusion
Every day, 5,000 new tokens launch across blockchain networks. Most will be worthless within weeks. Some are deliberate rug pulls.
The mechanics are always similar: hype, FOMO, liquidity drain, disappear. The victims are always the same: investors who moved faster than they researched.
The Squid Game Token is memorable because of the pop culture connection and the speed of the collapse. But less famous rug pulls happen dozens of times every day — smaller amounts, less coverage, same devastation for the people involved.
The protection is not complicated: verify the team, check the liquidity lock, run the honeypot test, look at holder concentration. These steps take 15 minutes. The loss they prevent can be a lifetime of savings.
In a market where 5,000 new tokens launch daily — the ability to identify rug pulls before they happen is not just useful. It is essential.
Disclaimer: This article is for educational purposes only. Cryptocurrency investments carry significant risk. Always do your own research before investing in any token or project.
