W3DWEB3DEFENDER
← Web3 Security Glossary

What is Rug Pull?

Reviewed 2026-06-25

Definition: A rug pull is when a project's creators drain its liquidity or abandon it, leaving token holders unable to sell at meaningful value. Warning signs include unlocked liquidity, owner control over trading, and anonymous teams with no verifiable track record.

How it works

In a liquidity rug, the creator adds liquidity to a decentralized exchange, attracts buyers, then removes the liquidity in one transaction — collapsing the price instantly. In a slow rug, the team sells its token allocation gradually over days or weeks while continuing to promote the project publicly. Both outcomes leave regular holders with tokens they cannot sell at any meaningful price. A third variant — a malicious contract upgrade — changes the token rules after launch to block selling or enable unlimited minting.

How to protect yourself

Check that liquidity is locked for a meaningful period before buying. Verify whether the owner can mint new supply or pause trading — these are execution vectors for a rug. Anonymous teams and no audit do not confirm a rug, but they raise the risk profile significantly. A token scanner checks these specific contract flags.

Frequently asked questions

How is a rug pull different from a natural price crash?

A rug pull is a deliberate creator action — removing liquidity or dumping a large undisclosed allocation. A market crash is a broad price decline driven by external factors. Both result in losses, but a rug is an intentional exit by the team.

Does locked liquidity guarantee a project is safe?

No. Liquidity locking closes one specific exit vector. Other vectors — minting new supply, team token dumps, or malicious contract upgrades — are separate risks that locking does not address.

Can I recover funds after a rug pull?

Rarely. Recovery requires identifying and legally pursuing the creators, which is difficult and expensive when teams are anonymous and assets have already moved through multiple wallets.

Run a free scan → Web3Defender

Open free in Telegram → Defender mini-app

Don't know your risk level? Take the free 60-second Crypto Safety Score quiz — get your 0-100 score and your personal checklist, no signup required.