A rugpull is a deliberate exit fraud in crypto — developers create a project (token, DeFi protocol, or NFT collection), attract investor capital, then withdraw all value and disappear, leaving investors holding worthless assets. The term originates from “pulling the rug out from under” investors. Rugpulls represent the most common category of crypto fraud — accounting for the majority of crypto hack/scam losses in absolute incident count, though individual losses are typically smaller than major protocol exploits. Rugpull mechanics vary but fall into two broad categories: hard rugs (sudden, complete liquidity removal or admin mint) and soft rugs (gradual token dumping, project abandonment without refunding users). Rugpulls are disproportionately concentrated in newly launched tokens on DEXs where any contract can add liquidity — particularly on Ethereum (Uniswap), BSC (PancakeSwap), and Solana (Raydium/pump.fun).
Rugpull Mechanics
| Type | Mechanism | Speed |
|---|---|---|
| Liquidity removal | Creator removes LP tokens from DEX → token crashes to ~$0 | Instant |
| Hidden mint function | Admin mints massive token supply → sells → price crashes | Fast |
| Honeypot contract | Buyers cannot sell — only creator can transfer | Slow drain |
| Developer token dump | Team pre-minted or pre-allocated tokens sold after price pump | Days-weeks |
| Protocol abandonment | Slow rug — stop updating, drain treasury, leave | Weeks-months |
| Rug via upgrade | Upgradeable contract swapped for malicious implementation | Fast |
Warning Signs (Red Flags)
| Red Flag | Significance |
|---|---|
| Locked liquidity missing | Creator can remove LP anytime → immediate exit possible |
| Contract not verified | Cannot read source code → hidden functions may exist |
| Large pre-mint allocations | Team holds 20%+ → dump risk |
| No audit or doxxing | Anonymous team, no audit → lower accountability |
| Unrenounced admin keys | Owner can call mint, pause, or blacklist |
| Copycat or forked contract | Malicious forks of legitimate contracts are common |
| Unusual buy/sell restrictions | Honeypot testing: only some wallets can sell |
History
- 2021 (Oct): Squid Game token — rugpull draining $3.38M; made international news due to tie-in with Netflix show
- 2022 (Jan): Frosties NFT — $1.3M NFT mint rugpull; founders arrested (rare prosecution)
- 2022: Chainalysis estimated $2.8B lost to rugpulls in 2022 alone
- 2023-2024: Pump.fun and meme coin meta generate thousands of rugpulls; most small-scale ($5K-$500K); Chainalysis 2024 report attributes majority of scam incidents to meme coin rugpulls
Common Misconceptions
“If the contract is audited, it can’t be a rugpull.”
Audits check code once at audit time. If developers use an upgradeable proxy pattern, they can swap in a malicious contract post-audit. Additionally, audits check for bugs, not necessarily for hidden admin privileges that the developer disclosed in documentation but hadn’t yet used. Many rugpulled contracts were “audited” by low-quality audit firms.
“If liquidity is locked, it’s safe.”
Liquidity lock prevents the LP token holder from removing liquidity during the lock period. It does not prevent: hidden mint functions (dump via minting, not LP withdrawal), team token dumps from unlocked pre-mints, or protocol contract upgrades. Liquidity lock is one safety feature, not comprehensive protection.
Criticisms
- Insufficient barriers to launch: On permissionless blockchains, creating a malicious token requires minimal skill and nearly zero cost — the ease of launching rugpulls creates a constant background fraud layer in crypto that harms retail adoption
- Insufficient prosecution: Pseudonymous developers make rugpull prosecution extremely rare; losses are typically absorbed by victims with no recourse
- Platform complicity: DEX platforms and token discovery sites (DEXTools, CoinGecko’s fast-track listings) provide visibility to new tokens without adequately warning users of unaudited contract risks
Social Media Sentiment
Rugpull awareness is extremely high in experienced crypto communities — users frequently warn “this is a rug” for any suspicious new project. However, FOMO repeatedly overcomes skepticism, and retail users continue rushing into obvious rugpulls during bull markets. The meme coin era (2023-2024) normalized extremely high rugpull frequency — many participants knowingly accept rugpull risk in exchange for the chance at early multiplier gains.
Last updated: 2026-04
Related Terms
Sources
- “Crypto Crime Report: Rugpull Analysis” — Chainalysis (2022-2024). Annual crypto crime reports including dedicated analysis of rugpull frequency, total losses, and trends — the most comprehensive quantitative dataset on exit scam economics in crypto.
- “Squid Game Token Rugpull: Mechanics and Post-Mortem” — Coindesk / Decrypt (2021). Analysis of the most media-covered rugpull — Squid Game branded token, honeypot sell restriction, $3.38M drained, and why mainstream media attention did not prevent the exit scam.
- “Frosties NFT Rugpull Prosecution: The Rare Legal Consequence” — DOJ / CoinDesk (2022). Documentation of the DOJ prosecution of Frosties NFT creators — the rare case of successful rugpull prosecution and what it required to achieve.
- “Detecting Rugpulls: On-Chain Analytics and Contract Analysis” — Dune Analytics / Token Sniffer (2023). Analysis of automated rugpull detection approaches — contract red flag analysis, LP lock verification, wallet distribution analysis, and on-chain behavioral patterns predicting rugpulls.
- “Exit Scams vs. Protocol Failures: Distinguishing Fraud from Bug” — Rekt.news Analysis (2023). Analytical framework for distinguishing deliberate rugpulls from genuine protocol bugs — examining intent evidence, fund disposition after incident, developer behavior, and legal and criminal implications.