A rug pull is a type of cryptocurrency scam in which the developers of a project deliberately abandon it after attracting significant investment, taking investors’ funds with them. The term comes from the idiom “pulling the rug out from under someone” — removing the foundation and causing a sudden, devastating collapse. Rug pulls are one of the most common and damaging scams in the crypto ecosystem, particularly prevalent in the DeFi and memecoin spaces where anyone can create and list a token without oversight.
There are several types of rug pulls. Liquidity pulls occur when developers create a token, set up a DEX liquidity pool, wait for investors to buy (adding value to the pool), and then remove all the liquidity — making the token untradeable and worthless. Selling pressure rugs happen when the team holds a massive percentage of the token supply and gradually or suddenly dumps it on the market. Hard rugs involve malicious smart contract code with hidden functions that allow developers to drain the contract (backdoor functions, hidden minting capabilities, or whitelist-only selling).
As of 2026, rug pulls have collectively stolen billions of dollars from crypto investors. Chainalysis estimated that rug pulls accounted for over $2.8 billion in crypto scam revenue in 2021 alone. While major DeFi protocols on established chains are generally safe, the permissionless nature of token creation means new rug pulls launch daily — especially on newer chains, in memecoin markets, and around trending narratives where FOMO overrides due diligence.
Origin & History
2017–2018: ICO-era “exit scams” are the precursor to rug pulls. Projects raise funds through token sales and disappear. The mechanism differs (ICO vs. DEX liquidity) but the concept is the same.
2020 (August–October): The term “rug pull” gains widespread usage during DeFi Summer. As hundreds of new DeFi protocols launch on Ethereum, many turn out to be scams that drain funds from liquidity pools.
2020 (September): SushiSwap’s “Chef Nomi” incident — the pseudonymous creator converts approximately $13–14 million of the developer fund to ETH, causing panic. While not a true rug pull (funds were eventually returned), it popularized awareness of developer fund risks and the concept of exit scams in DeFi.
2021 (March): Meerkat Finance (on Binance Smart Chain) suffers a $31 million rug pull on March 4, 2021 — just one day after launching — one of the first major DeFi rug pulls on BSC. The developers initially claimed it was an external hack before deleting their accounts.
2021: Rug pulls explode across BNB Chain (BSC), where low gas fees make it cheap to deploy scam tokens. Token names capitalize on trends: “SafeMoon” clones, “Elon” tokens, “Moon” tokens.
2021 (October): AnubisDAO raises approximately $60 million in ETH and the funds are drained approximately 20 hours after launch — one of the largest and fastest single rug pulls in DeFi history.
2021 (November): Squid Game Token surges over 40,000% on the hype of the Netflix show, then crashes to near zero when developers drain the liquidity pool. Investors could not sell due to a hidden anti-sell mechanism coded into the contract. Developers made off with approximately $3.3 million.
2022 (January): NFT rug pulls become prominent. Frosties NFT sells out 8,888 NFTs, raising approximately $1.1 million, and the developers immediately disappear without delivering any roadmap promises. In March 2022, the US Department of Justice arrests Ethan Nguyen and Andre Llacuna — marking the first federal prosecution of an NFT rug pull. Baller Ape Club and others follow similar patterns.
2023–2024: Memecoin rug pulls dominate. The ease of launching tokens on Solana (via Pump.fun and similar platforms) enables thousands of micro-rug pulls targeting the memecoin trading community.
2026: Rug pull detection tools mature (Token Sniffer, GoPlus, De.Fi). Community awareness increases, but rug pulls persist as crypto’s most common scam type.
“In DeFi, if you can’t identify the product, you are the product. If you can’t identify the rug, you’re standing on it.” — Crypto community wisdom
In Simple Terms
The disappearing store: Imagine a store opens in your town selling amazing products at incredible prices. People rush to buy. Then one morning, the store is empty — the owners took all the money and vanished. That’s a rug pull: an attractive investment opportunity that was designed to steal your money from the start.
The pool drain: Picture a swimming pool (liquidity pool) that everyone contributes water (money) to. The pool gets bigger and bigger as people add water. Then the pool owner opens a hidden drain at the bottom and all the water disappears. Investors are left with an empty pool.
The magic show where you’re the volunteer: A rug pull is like a magic show where the magician asks for your wallet to demonstrate a trick, and then “magically” disappears with it. The trick was always about taking your money — the show was just the distraction.
The crypto version of “take the money and run”: Developers create something that looks legitimate, generate excitement and investment, and then disappear with the funds. It’s the oldest scam in the book, just using blockchain technology as the medium.
Important: If a new token promises unrealistic returns, has anonymous developers, locks no liquidity, and is being hyped aggressively on social media — it’s likely a rug pull. Always research before investing: check the contract code, verify team identities, ensure liquidity is locked, and never invest more than you can afford to lose.
Key Technical Features
Liquidity Pool Rug Pull
- Developer creates a token and adds it to a DEX liquidity pool (paired with ETH, SOL, etc.)
- As investors buy the token, they add value (ETH) to the pool
- When enough value accumulates, the developer removes all liquidity, taking the ETH
- The token becomes untradeable — its price goes to zero instantly
- Can be prevented by “locking” liquidity in time-locked smart contracts
Malicious Smart Contract Code
- Hidden mint functions: Allow the developer to create unlimited new tokens and sell them
- Blacklist functions: Prevent anyone except the developer from selling (Squid Game Token model)
- Fee manipulation: Contract allows developer to set selling fees to 99–100%
- Proxy upgrades: Contract can be changed after deployment to add malicious functions
- Detection: Tools like Token Sniffer, GoPlus Security, and De.Fi Scanner analyze contract code
Slow Rug (Soft Rug)
- Developers gradually sell their large token holdings over time (days to weeks)
- Price slowly bleeds down as constant selling pressure absorbs buy orders
- Less dramatic than a hard rug but equally destructive to investors
- Harder to detect because it resembles normal selling activity
- Often accompanied by gradually decreasing social media activity
NFT Rug Pulls
- Team launches hyped NFT collection with promises of future utility (game, metaverse, token airdrop)
- Collection sells out (mint revenue goes to team wallet)
- Team disappears without delivering any of the promised roadmap items
- Discord and social media accounts go silent or are deleted
- The NFTs become worthless as the community collapses
Advantages & Disadvantages
| Advantages | Disadvantages |
|---|---|
| None — rug pulls are scams with no legitimate advantage | Financial loss: Investors lose their entire investment |
| Trust erosion: Rug pulls damage the broader crypto industry’s reputation | |
| Emotional harm: Victims experience stress, shame, and loss of trust | |
| Legal complications: Perpetrators are often anonymous, making recovery nearly impossible | |
| Market impact: High-profile rug pulls cause broader market sell-offs | |
| Barrier to adoption: Scam prevalence discourages newcomers from entering crypto |
Risk Management
Red Flags to Watch For
- Anonymous or unverifiable team members
- No liquidity lock or very short lock period
- Extremely aggressive marketing and FOMO-inducing tactics
- Unrealistic promises (“100x guaranteed,” “risk-free returns”)
- No smart contract audit from a reputable firm
- Concentrated token ownership — team holds >50% of supply
- Unable to sell the token (honeypot contract)
- Copy-paste whitepaper or website from other projects
- New social media accounts with purchased followers
Due Diligence Checklist
- Verify team identities (LinkedIn, past projects, conference appearances)
- Check the smart contract on Token Sniffer, GoPlus, or similar tools
- Verify liquidity is locked (check liquidity lock contracts on platforms like Unicrypt or Team.Finance)
- Review token distribution — check top holders on the blockchain explorer
- Read the smart contract code (or hire someone to) — look for hidden functions
- Check if the contract is verified and source code is published on the blockchain explorer
- Search for the project on scam databases and warning lists
If You Suspect a Rug Pull
- Withdraw your funds immediately if you still can
- Document everything (transaction hashes, screenshots, wallet addresses)
- Report to the platform (DEX, exchange) and relevant authorities
- Warn the community on social media and forums
- Consider reporting to law enforcement — some jurisdictions have pursued rug pull cases
Cultural Relevance
“Rug pull” has become one of the most recognized terms in crypto culture, used both literally (actual scams) and colloquially (any disappointing outcome). When a project underperforms expectations or makes an unpopular decision, the community sarcastically calls it a “slow rug.” The term has even entered mainstream language — “getting rugged” is understood outside of crypto contexts.
The prevalence of rug pulls has created a hyper-vigilant culture in DeFi. “DYOR” (Do Your Own Research) is repeated constantly, and tools for verifying token contracts have become essential. Crypto communities have developed sophisticated collective intelligence — when someone spots suspicious contract code, the information spreads rapidly through Twitter, Discord, and Telegram.
“The speed at which the crypto community identifies and alerts about rug pulls is actually impressive — it’s just that many people see the warnings and buy anyway because of FOMO.” — DeFi security researcher
The “Rekt” database (rekt.news) has become a crypto cultural institution, documenting every major rug pull and exploit with detailed post-mortems. Being featured on Rekt is the crypto equivalent of a public autopsy.
Real-World Examples
1. Squid Game Token (November 2021)
The Squid Game Token capitalized on the viral Netflix show. Launching at $0.01 on October 26, 2021, it surged over 40,000% in roughly a week, reaching a peak price of approximately $2,861. However, the smart contract contained a hidden anti-sell mechanism — buyers could purchase but not sell. When the price peaked on November 1, 2021, the developers drained the liquidity pool and disappeared with approximately $3.3 million. The incident received worldwide media coverage and became a textbook example of a rug pull.
2. AnubisDAO (October 2021)
AnubisDAO, marketed as a fork of OlympusDAO, raised approximately $60 million in ETH through a token launch on October 28, 2021. Just approximately 20 hours after launch, the entire treasury was drained to a single wallet. The project had no website, no whitepaper, and anonymous developers — yet investors poured in tens of millions based purely on hype and FOMO. This remains one of the largest single rug pulls in DeFi history.
3. Frosties NFT (January 2022)
Frosties was an NFT collection on Ethereum that promised a metaverse game, merchandise, and ongoing development. After selling out 8,888 NFTs on January 9, 2022 (raising approximately $1.1 million), the developers abandoned the project within hours, deactivating the website and deleting all social media accounts. In March 2022, the US Department of Justice arrested the two developers — Ethan Nguyen and Andre Llacuna — in Los Angeles, marking the first federal prosecution of an NFT rug pull. Both faced charges of wire fraud and money laundering, each carrying a maximum sentence of 20 years.
Comparison Table
| Rug Pull Type | Method | Speed | Detection Difficulty | Recovery Chance |
|---|---|---|---|---|
| Liquidity Pull | Remove DEX liquidity | Instant | Medium (check if locked) | Very low |
| Honeypot | Contract prevents selling | Gradual (trap) | Medium (scanner tools) | None |
| Hidden Mint | Create unlimited tokens and sell | Fast | Hard (requires code review) | Very low |
| Slow Rug | Gradually dump team tokens | Weeks/months | Hard (looks like normal selling) | Low |
| NFT Rug | Sell out collection, abandon project | Days to weeks | Hard (promises are vague) | Very low (unless law enforcement) |
| Fee Manipulation | Set sell tax to 99%+ | Gradual | Medium (check contract fees) | None |
Related Terms
DYOR (Do Your Own Research) — The essential practice of researching before investing.
Honeypot — A smart contract that allows buying but prevents selling.
Exit Scam — A broader term for scams where operators disappear with funds.
Smart Contract Audit — Professional code review that can identify rug pull mechanisms.
Liquidity Lock — Locking LP tokens in a time-locked contract to prevent liquidity pulls.
Token Sniffer — A tool for detecting malicious token contracts.
FOMO — The emotional driver that makes people vulnerable to rug pulls.
Pump and Dump — A related scam involving price manipulation before selling.
Rekt — Crypto slang for losing money, often through rug pulls.
Anonymous Team — A major red flag for potential rug pulls.
FAQ
Q: How common are rug pulls? Very common, especially in the memecoin and new token space. Chainalysis estimated rug pulls stole $2.8 billion in 2021. On platforms like Pump.fun (Solana), thousands of tokens are created daily, and the vast majority are either rug pulls or fail quickly. Major established protocols are generally safe, but new, unaudited projects carry significant rug pull risk.
Q: Can I get my money back after a rug pull? In most cases, no. Blockchain transactions are irreversible, and rug pull perpetrators are usually anonymous. However, there are rare cases of recovery: some jurisdictions have prosecuted rug pull operators (Frosties NFT case), and in a few instances, community pressure has forced developers to return funds (Chef Nomi/SushiSwap, and partially in the case of Meerkat Finance). Don’t count on recovery — prevention is the only reliable strategy.
Q: How can I spot a potential rug pull? Key red flags: (1) Anonymous or unverifiable team, (2) No liquidity lock, (3) Unaudited smart contract, (4) Contract allows minting or has blacklist functions, (5) Team holds a huge percentage of tokens, (6) Aggressive FOMO marketing, (7) Unrealistic promises, (8) No real product or use case, (9) Copied website/whitepaper, (10) Large buys from team wallets right after launch. Use tools like Token Sniffer and GoPlus to analyze contracts.
Q: Are rug pulls illegal? Yes, rug pulls are fraud and theft, which are illegal in virtually every jurisdiction. However, enforcement is challenging because: crypto perpetrators are often anonymous, they may operate across jurisdictions, and blockchain transactions are pseudonymous. Some high-profile rug pulls have resulted in arrests and convictions (Frosties NFT), but the vast majority go unpunished.
Q: What’s the difference between a rug pull and a failed project? Intent is the key difference. A rug pull is deliberately designed to steal funds — the developers never intended to deliver a real product. A failed project had genuine intentions but couldn’t execute. The distinction can be blurry: some projects start legitimately but become soft rugs when the team gives up and dumps tokens. If the team is transparent about challenges and doesn’t dump tokens, it’s likely a failure, not a rug.
Sources
Chainalysis. “Crypto Crime Report — Rug Pulls.” chainalysis.com
Rekt News. “Rug Pull and Exploit Database.” rekt.news
Token Sniffer. “Smart Contract Analysis.” tokensniffer.com
US DOJ. “Two Defendants Charged in Non-Fungible Token Fraud Scheme.” justice.gov (2022)
CertiK. “DeFi Security Report.”
