TrustDex › Guides › Anatomy of a rug pull
Anatomy of a rug pull
A rug pull isn't chaos — it's a script. The same on-chain sequence plays out almost every time, and most of the tells are visible before the exit, not just in the wreckage after it.
Where a honeypot blocks your exit, a rug pull takes the whole floor out from under everyone at once — the deployer removes the liquidity that gives the token value, and the price falls to nothing. The reason rugs are worth studying is that they follow a predictable arc. Learn the stages and you stop reacting to the crash and start recognising the setup, which is the only part you can act on. This guide walks the sequence, points to the signals visible at each stage, and ends with the check that catches most of them.
Check a token's rug setup now
Paste any address — the scan reads liquidity, authorities, and holder concentration.
The sequence
Deploy and seed liquidity
The token is created and paired with a small amount of real value (SOL, ETH, USDC) in a liquidity pool. Two choices here decide everything: whether the deployer keeps the mint/authority powers, and whether the liquidity is locked or left withdrawable. A rug needs at least one lever left open — unlocked liquidity, a live mint authority, or a big hidden bag of supply.
Generate hype and buys
Marketing, influencer calls, and a rising chart pull in buyers, who add their own money to the pool. The pool grows with real value the deployer can later take. Price climbs because buys outpace sells — the same one-directional chart that makes people feel safe is quietly filling the vault the deployer intends to empty.
Pull the floor
In a hard rug, the deployer removes the liquidity in a single transaction (or mints a flood of new supply and dumps it), and the price collapses to near zero — often within one block. In a soft rug, they abandon the project and sell their holdings quietly over days or weeks. Either way, the money that came in during Stage 2 leaves with them, and holders are left with tokens no pool will buy.
The key insight: every one of these stages except the final transaction is visible on-chain in advance. You can't predict the moment of the exit, but you can read whether the setup that allows it exists — and decline the ones that do.
The signals visible before the exit
These are the Stage-1 levers, all readable in a scan:
Unlocked liquidity. If the LP tokens aren't locked or burned and sit in the deployer's wallet, the liquidity can be pulled at any moment. Locked or burned liquidity removes this specific vector for the lock's duration — the single most important rug signal.
Active mint authority. On Solana, a live mint authority lets the deployer print new supply and dump it into the pool — a rug that doesn't even need to touch the LP. See the authority guide →
Concentrated supply. When the deployer's wallets hold a large share of the tokens, they can crash the price by selling their own bag — no liquidity removal required. Read concentration against the token's age: high concentration on a day-old token is expected, on an "established" one it's a warning.
A brand-new, shallow pool. Rugs are usually fast. A pool that's hours or days old with thin liquidity is where most of them live — not proof of intent, but the environment they thrive in.
Why "the team seems legit" isn't a signal
The most expensive mistake is trusting social proof over on-chain structure. A polished website, an active Telegram, and a confident founder cost nothing to fake and tell you nothing about whether the liquidity can be pulled. The structure is what binds the deployer's hands — or doesn't. Read the levers, not the vibes: a token with locked liquidity and renounced authorities is constrained regardless of how the team presents, and a token with unlocked liquidity and a live mint authority is a loaded setup no matter how friendly the chat is.
Read the setup, then trade what survives it
TrustDex checks the rug levers, then lets you swap non-custodially if it clears.
Frequently asked
What is a rug pull?
When a token's creators withdraw the liquidity backing it (or dump a hidden supply), collapsing the price to near zero and leaving holders with tokens they can't sell for meaningful value — an exit scam executed through the token's own liquidity.
Can you spot one before it happens?
You can spot the conditions that make one possible: unlocked liquidity, an active mint authority, concentrated supply, a brand-new pool. None guarantees a rug, but their combination is the setup — and it's all visible on-chain before the exit.
Soft rug vs hard rug?
A hard rug removes liquidity or dumps supply suddenly, crashing the token in one transaction. A soft rug is slower — the team abandons the project and sells quietly over time. The on-chain setup often looks similar; the difference is the speed of the exit.
Does locked liquidity mean it's safe?
It removes one rug vector for the lock's duration, which matters, but it isn't a full guarantee. An active mint authority, a short lock, or concentrated supply can still enable a collapse. Read it as one good signal among several.