What is a crypto rug pull?

A crypto rug pull is an exit scam where token developers deliberately withdraw liquidity, dump their holdings, or abandon a project after attracting investor capital — leaving holders with worthless, untradeable tokens. Unlike hacks, rug pulls require no technical exploit. They are intentional fraud executed through functions the developers designed into the contract from the start.

How do I avoid a crypto rug pull?

Verify that liquidity is locked in a time-locked contract. Check that no small group of wallets controls a disproportionate share of token supply. Review the smart contract for hidden mint functions and sell restrictions. Confirm the team has verifiable identities and track records. Use transaction simulation to confirm tokens can actually be sold before you invest.

How do you spot a rug pull early?

The most reliable early signals are unlocked liquidity, concentrated token ownership in developer wallets, hidden contract functions that restrict selling, an anonymous or unverifiable team, and unusual developer wallet activity preceding a price spike. Transaction simulation before investing is the most reliable confirmation test — it reveals whether a token can actually be sold.

Can rug pulls be detected before they happen?

Yes. Many rug pulls can be detected early through on-chain analysis and behavioral monitoring. Unlocked liquidity, concentrated token ownership, hidden contract functions, unusual developer wallet activity, and anomalous transaction patterns are all detectable signals that precede most rug pull events. Sophisticated variants require dynamic transaction simulation rather than static contract review.

What is a honeypot in crypto?

A crypto honeypot is a type of rug pull contract designed to allow token purchases but block sales. Only the developer wallet can execute sell transactions. The token price is manufactured — no real exit exists for investors. Honeypot contracts are detectable through transaction simulation before investment.

Are audited crypto projects safe from rug pulls?

No. Smart contract audits evaluate whether code executes correctly — they do not assess developer intentions. A project can pass a full audit and still be a deliberate rug pull if the exit mechanism is implemented through upgradeable proxy contracts, if liquidity is not locked, or if developer token holdings are concentrated and unvested.

How quickly does a rug pull happen?

Liquidity rug pulls can execute in a single transaction — the pool goes from functional to empty in seconds. Token dump rug pulls compress into minutes. Slow rug pulls unfold over weeks as developers gradually exit positions. The fastest variants are complete before most investors realize what is happening.

What is the best tool to detect a rug pull?

The most effective tools simulate actual interactions with the token contract before investment — confirming whether tokens are sellable, whether hidden functions exist, and whether behavioral patterns are consistent with a legitimate project. Static tools tell you what the contract looks like. Transaction simulation tells you what it will actually do. Web3Firewall applies pre-transaction simulation and behavioral risk analysis to surface rug pull signals before funds are committed.

Crypto Rug Pull: Detect & Avoid Exit Scams Before You Lose Funds

Risk Assessment Tool

Rug Pull Readiness Calculator

Check every signal you've been able to verify for this token. We'll score the risk exposure in real time — and show you the gaps that matter most.

Live Risk Score

Unscored — Complete Assessment

Check each item you've verified for this token. Score updates as you go.

0 of 10 signals verified 0%

Liquidity is locked in a verifiable time-locked contract

Lock duration is meaningful relative to the project's claimed timeline — not 7 days on a "5-year vision"

Critical

No extreme token concentration in developer/insider wallets

Distribution analysis shows no single wallet controlling >10–15% of circulating supply that's unaccounted for

Critical

Transaction simulation confirms token is actually sellable

Not just buyable — a simulated sell transaction executes without restriction for non-developer wallets

Critical

Contract contains no hidden mint functions or sell restrictions

No blacklist capabilities, no owner-only transfer functions, no upgradeable proxy concealing dangerous logic

High

Team identities are verifiable with track records at stake

Founders are publicly identified, have prior verifiable history, and confirmed involvement — not just claimed

High

Reputable audit performed on the current deployed contract version

Audit is published by a known firm, references this specific contract address, and was not done on a different version

High

Claimed partnerships and advisors have independently confirmed involvement

Not self-reported by the project — confirmed via the partner's own channels or public statement

Medium

No unusual developer wallet activity ahead of a price spike

On-chain wallet analysis shows no wallet-to-exchange transfers or unusual token movements from insider addresses

High

No artificial urgency, guaranteed returns, or coordinated influencer campaigns

Marketing is organic, no FOMO-engineered pressure, and influencer backing isn't funded by the development team

Medium

Project has a verifiable product, codebase, or real development activity

GitHub commits, testnet deployments, or live product — not just a website, whitepaper, and social channels

Medium

// Assessment Output

—

Signals Verified

of 10 risk factors confirmed

Critical Gaps

unverified high-weight signals

Risk Score

—

out of 100 maximum protection

Assessment

—

// Unverified Risk Signals

Static checks aren't enough.

Even if you verified every item on this list manually, you'd still be missing the most important signal: whether a hidden contract function will block your exit at sell time. Transaction simulation is the only way to confirm this before you invest.

Scan Token Now → Book a Demo

Want to understand how it works first? See the product →

Simulate Before You Commit

Web3Firewall simulates token interactions and analyzes contract behavior before you put funds in — catching rug pull signals that no static audit will ever surface.

Try the Sandbox →

Real-World Rug Pulls

What the Exit Looks Like

Every one of these exits had detectable signals in advance. The tools to catch them existed. Most investors didn't use them.

$3.4M

Squid Game Token

October 2021

Price rose from fractions of a cent to over $2,800 in days. Investors discovered they couldn't sell — contract only permitted buying. Developers dumped in a single transaction. Price collapsed 99.99% in minutes.

No liq. lockSell restrictedAnon team

$60M

AnubisDAO

October 2021

Raised $60M in ETH through a liquidity bootstrapping event. Within 20 hours, all funds were transferred out in a single transaction. No product existed. No team identified. Funds moved to an unknown wallet.

No productNo teamNo lock

Recurring

DeFi Yield Farm Pattern

Ongoing

Anonymous teams deploy yield contracts with extraordinary APY. Contracts pass static audits — the malicious withdrawal function is inactive during review. Dynamic simulation would reveal the issue immediately.

Passed auditHidden fnAnon team

Rug Pull Readiness Calculator

// Unverified Risk Signals

Static checks aren't enough.

Simulate Before You Commit

What the Exit Looks Like

Don't Invest Blind. Detect Rug Pulls Before They Execute.