What is a rug pull?

Imagine you pay for a stall at a new market and the organizer runs off with the cash before the shops open. That’s roughly how a rug pull works: the team attracts money with promises about a project and then pulls the rug out from under the participants.

A common version happens on decentralized exchanges (DEXs). The creators put their token together with another cryptocurrency into a liquidity pool so that swaps can take place. Once buyers come in, they withdraw the liquidity they control. Holders still see the tokens in their wallet, but there may be no practical way to swap them. Other versions include embezzling money raised for development or hidden functions in the code that favor the creators.

Why it matters

A token can transfer normally on the blockchain and still be part of a scam. The network working doesn’t guarantee the team is honest. Nor does a polished website, an active community or promotion by well-known accounts prove your money is safe.

The same goes for self-custody. Holding your own private keys protects control of your wallet, not the value of every token in it. We consider this distinction fundamental: you can have sole ownership of an asset that nobody wants, or is able, to buy anymore.

What to watch out for

Useful questions are who can withdraw the liquidity, how many tokens the team controls and whether it can change the rules of the smart contract. The ability to mint unlimited tokens or to block sales deserves particular attention.

A security audit and locked liquidity are not a guarantee. An audit may cover a specific version of the code, while a liquidity lock has an expiry and doesn’t rule out other forms of abuse.

Finally, not every price collapse is a rug pull. A project can fail without fraud. The label refers to fraudulent conduct by those in charge, not just a big loss for holders.