How to Avoid Rug Pulls: A Complete Guide for Crypto Traders
Rug pulls remain the single largest source of losses for memecoin traders. According to on-chain data, the vast majority of tokens launched on Solana go to zero, and a meaningful percentage of those are intentional scams designed to extract money from buyers. Understanding how rugs work and what to check before buying is not optional. It is the baseline skill for surviving in this market.
What is a rug pull?
A rug pull happens when a token creator or early insider extracts value from other holders, usually by removing liquidity, dumping a large supply allocation, or exploiting a contract mechanism that prevents selling. The term covers a range of tactics, from blatant theft to subtler extraction patterns that play out over days.
Types of rug pulls
Hard rug (liquidity removal)
The most straightforward rug. The creator adds initial liquidity to a DEX pool, waits for buyers to push the price up, then removes all liquidity in a single transaction. Buyers are left holding tokens with no market to sell into. The chart shows a vertical red candle to near-zero.
Slow rug (gradual dumping)
More subtle and harder to detect in real time. The creator holds a large supply allocation (often spread across multiple wallets) and sells gradually as new buyers come in. The chart looks like a slow bleed rather than a sudden crash, which keeps hope alive long enough for the creator to extract more value.
Honeypot
A contract that allows buying but blocks or restricts selling through hidden code. Buyers see the price going up and think they are profitable, but when they try to sell, the transaction fails or incurs a 90%+ tax. These are technically more sophisticated than simple liquidity rugs and harder to detect without contract analysis.
Mint exploit
When the mint authority is not revoked, the creator can generate unlimited new tokens at any time. Even if the initial supply distribution looks fair, the creator can mint millions of tokens and dump them on the market. This dilutes all existing holders to near zero.
Red flags before you buy
- Mint authority not revoked. This is the single most important check on Solana. If the creator can still mint tokens, nothing else matters. Walk away.
- Freeze authority active. The freeze authority lets the creator freeze any wallet's tokens, preventing them from selling. Legitimate tokens revoke this.
- Concentrated holder distribution. If the top 5 wallets (excluding the LP pool and known burn addresses) hold more than 30% of supply, the risk of a coordinated dump is high.
- Unlocked liquidity. If the LP tokens are sitting in the creator's wallet rather than locked or burned, liquidity can be removed at any time.
- Freshly created dev wallet. A developer wallet with no transaction history before the token launch suggests a disposable identity created specifically for this project.
- Copy-paste branding. Generic website, stolen artwork, token name that mimics a popular project with slight misspelling. These are signs of low effort scams that rely on hype and confusion.
- No community before launch. Legitimate projects usually build some community presence before launching a token. A token that appears with no prior social footprint and immediately starts getting promoted is suspect.
On-chain checks you can do yourself
Every check below can be done for free using public tools:
- Check mint authority on Solscan. Navigate to the token page, look at the "Mint Authority" field. It should show "Disabled" or point to a null/burn address.
- Check freeze authority on the same page. Should also be disabled.
- Review holder distribution. Look at the top holders list. Identify the LP pool address and any known burn addresses. What remains should be reasonably distributed.
- Verify liquidity status. Check whether LP tokens are burned (permanently locked) or held in a wallet. Raydium LP tokens can be checked through the pool page. On PumpFun, tokens that have "graduated" to Raydium have their liquidity burned by default.
- Check developer wallet history. Look at the creator's wallet on Solscan. Do they have a history? Have they launched other tokens? What happened to those tokens?
Tools that automate safety checks
Manual checking works but does not scale when you are evaluating dozens of tokens daily. Several tools automate the process (see also best Solana tools for crypto traders):
- Rugcheck.xyz runs a comprehensive safety audit on any Solana token in seconds. It checks mint authority, freeze authority, LP status, top holders, and known scam patterns.
- GoPlus Security API provides programmatic access to token safety data across multiple chains.
- Pique Signal runs automated safety filters on every token it evaluates. Tokens that fail safety checks (unrevoked mint authority, concentrated supply, suspicious LP status) are excluded from alerts regardless of how strong the other signals look. This safety-first approach is reflected in its tracked hit rates.
The uncomfortable truth
No system catches every rug pull. New scam mechanics emerge regularly, and sophisticated actors continuously find ways to pass automated checks while still extracting value. Safety tools reduce your exposure to the most common and obvious rugs, but they do not eliminate risk entirely.
The best defense combines automated tools with judgment: check the safety data, but also consider whether the project makes sense, whether the community is real, and whether the narrative has substance beyond "number go up." Position sizing matters too. Even with thorough due diligence, some percentage of trades will be losses. Size accordingly.
A practical safety checklist
Before buying any memecoin, run through this checklist:
- Is mint authority revoked? (If no, stop here.)
- Is freeze authority revoked?
- Is liquidity locked or burned?
- Is holder distribution reasonable (no single wallet with 10%+ of circulating supply)?
- Does the developer wallet have transaction history?
- Is there a community or social presence that predates the token launch?
- Have I checked Rugcheck or a similar tool?
- Is my position size small enough that a total loss would not meaningfully impact my portfolio?
If you cannot answer yes to at least the first four questions, the token is not worth the risk regardless of how promising the chart or narrative looks.