Home / Crypto / Academy / Custody and security

Spotting a rug pull before you buy

You cannot make a new token safe. You can, in about five minutes, rule out most of the obvious traps.

MODULE 8 OF 64 LEVEL 2: CUSTODY AND SECURITY 11 MIN

First, the mindset

Anyone can create a token in ten minutes for a few dollars. There is no vetting, no listing standard and no regulator. The default assumption for any token you have not independently heard of should be that it is worthless, and the burden of proof sits with it.

Check one: can it actually be sold

A honeypot is a contract where buying works and selling reverts. Charts look flawless because nobody can sell.

Check two: who can change the contract

Read the contract on the block explorer, or use a scanner that summarises it. You are looking for functions that let the owner do things after launch.

✓ Reassuring
  • Ownership renounced, or held by a timelock or multisig
  • Liquidity locked for a meaningful period, or burned outright
  • Contract verified and readable on the explorer
  • No mint function, or minting permanently disabled
  • No function that can pause or blacklist transfers
✗ Walk away
  • The owner can mint more tokens at will
  • The owner can blacklist addresses or pause selling
  • The owner can change the transfer tax after launch
  • Liquidity is unlocked, so it can be pulled at any moment
  • The contract is unverified, so nobody can read what it does

Check three: holder distribution

Open the holders tab on the explorer. If a handful of wallets that are not the liquidity pool or a lock contract hold a large share of supply, they can exit into whatever demand appears and you will be the demand.

Look also for many wallets holding suspiciously identical amounts, which usually means one person split supply to look decentralised.

Check four: the liquidity itself

Liquidity is the pool that lets people trade. If it is small, the price moves violently and you cannot exit at size. If it is unlocked, whoever controls it can remove it and the price goes to zero in one transaction. That is the literal meaning of a rug pull.

Check five: the social signals

Passing every check does not make a token safe. It rules out the mechanical traps. It says nothing about whether the project will exist in six months, and most will not.

The rule that survives everything

Size the position so that a total loss is genuinely acceptable, because for speculative tokens the base rate of going to zero is very high. If a position going to zero would change your life, it is too big regardless of how good the checks looked.

READ NEXT

BEFORE YOU MOVE ON

Common questions

What does liquidity locked mean?

The tokens that make trading possible are held in a contract that prevents withdrawal until a set date. It stops the team removing the pool and collapsing the price, though it does not stop them selling their own holdings.

Is a renounced contract safe?

It removes the owner's ability to change things, which is good, but it also means nothing can ever be fixed. It is one signal among several, not a safety certificate.

Risk warning: crypto is highly volatile and largely unregulated. You can lose everything you put in. Nothing here is financial, investment or tax advice.

← PREVIOUS
The complete crypto scam catalogue
NEXT →
Approvals, signatures and wallet drainers