What Is a Rug Pull? Recognizing Crypto Scams

In November 2021, a token called SQUID, marketed around the Netflix show Squid Game, spiked to a price near $2,861 before crashing to virtually nothing within minutes as its creators sold their holdings and disappeared. That episode is now one of the most cited examples of a rug pull: a scam in which a project’s team abandons it and withdraws the funds, leaving investors holding worthless tokens. The term borrows from the idiom of having the rug pulled out from under you, describing how abruptly the loss happens. Rug pulls have become especially common in decentralized finance, where anyone can launch a token or liquidity pool with minimal oversight.

There are several common types of rug pulls. In a liquidity pull, developers remove all the paired assets from a decentralized exchange liquidity pool, crashing the token price to zero instantly. In a sell-off dump, insiders who hold a large percentage of the token supply sell it all at once, overwhelming buyers and collapsing the price. Some projects also build malicious code directly into their smart contracts, such as functions that prevent regular holders from selling while allowing the developers unrestricted access to sell freely.

Recognizing the warning signs of a rug pull can help investors avoid significant losses. Anonymous teams with no verifiable track record, unrealistic promises of guaranteed high returns, and locked liquidity for only a short duration are all red flags. Projects that rush their launch without a clear roadmap, working product, or audited smart contract also carry elevated risk. A sudden surge in social media hype paired with pressure to buy immediately is another common tactic used to attract victims before a planned exit.

Before investing in any new token, it is worthwhile to check whether the liquidity pool is locked using a third-party locking service, review whether the smart contract has been audited by a reputable firm, and look at how concentrated token ownership is among a small number of wallets. Tools that analyze contract code for suspicious functions can also flag projects with built-in restrictions on selling. Taking these precautions before committing funds can dramatically reduce exposure to fraudulent projects.

While regulators in various jurisdictions have begun paying closer attention to fraudulent token launches, enforcement remains difficult given the pseudonymous and borderless nature of blockchain transactions. Ultimately, the responsibility falls largely on individual investors to conduct thorough research and remain skeptical of projects that seem too good to be true. As the broader crypto ecosystem matures, greater awareness of rug pull tactics and continued improvements in on-chain analytics tools should help make these scams easier to spot before they cause harm.