Rug Pulls: How to Spot Them
This module shifts from mechanics to risk: the remaining lessons teach you to recognize the ways DeFi can cost you money beyond ordinary market volatility, starting with the most deliberately malicious category — the rug pull. A rug pull is a project designed, from the start or at some point along the way, so that insiders can drain funds from users who trusted it, named for the sensation of the "rug being pulled out" from under participants with no warning.
Four warning signs recur across documented rug pulls, and checking all four together is far more reliable than checking any single one. First, an anonymous team with no verifiable track record — legitimate projects increasingly have founders with a public, checkable history in the space (prior projects, public code contributions, consistent public identity), while rug pulls are disproportionately run by teams with no name, no history, and no way to be held accountable if they disappear. Second, unlocked or concentrated token supply — if a small number of wallets, often controlled by the team, hold a large percentage of the total token supply, those wallets can sell enough of the supply at once to collapse the price, and a public blockchain lets you actually check this concentration yourself rather than taking anyone's word for it. Third, unaudited smart contracts — without an independent security review, a contract can contain a function (sometimes deliberately hidden or obfuscated) that lets the deployer drain user funds or mint unlimited new tokens, functions a reputable audit firm is specifically trained to catch. Fourth, liquidity that isn't locked — recall from the liquidity-pool lessons that a pool's liquidity determines how easily people can sell a token; if the team controls the liquidity pool's tokens and hasn't locked them (committed them to a smart contract that prevents withdrawal for a fixed period), they can remove all of it instantly, leaving remaining holders with a token that can no longer be sold at any meaningful price.
None of these four signals alone proves a scam — some legitimate early-stage projects are anonymous by choice, and audits cost money a genuinely new team may not yet have. But when several of these signals stack together, especially combined with aggressive hype and promises of guaranteed high returns, the pattern should be treated as a strong warning rather than dismissed.
Worked Example
Consider a documented, classic rug-pull pattern: a new token launches with a professionally designed website, a coordinated social media campaign promising rapid gains, and a liquidity pool paired against ETH or a stablecoin. Checking the blockchain directly (something anyone can do, exactly as the "money legos" lesson described — all activity is public), you'd find that the development team's wallets hold 40% of the total token supply, split across just a handful of addresses. The liquidity pool shows no lock contract — the tokens providing liquidity sit in a regular wallet the team controls, not a time-locked contract. There is no published audit report from any recognizable security firm.
Within days of launch, after enough outside buyers have bought in (often driven by the hype campaign and a fast-rising price chart that attracts momentum buyers), the development wallets begin selling their 40% token holdings directly into the pool, and separately, the liquidity controller withdraws the pool's liquidity entirely. The combination collapses the token's price toward zero almost instantly — sellers after this point find there's no liquidity left to sell into at any reasonable price, because the pool itself is gone. Every one of the four warning signs — anonymous team, concentrated supply, no audit, unlocked liquidity — was checkable on-chain or through public research before a single dollar was invested, which is exactly why this lesson teaches you to check them as routine practice rather than after the fact.
Exercise
Pick a hypothetical new token launch (or research a real recent one, being careful not to invest any actual funds as part of this exercise) and check the four signals described in this lesson: team identity and track record, token supply distribution (research what percentage the top wallets hold), whether liquidity is locked and for how long if so, and whether the contract has a published audit from a recognizable firm.
Score the project red, yellow, or green on each of the four signals individually, then write one sentence stating your overall assessment and whether you'd personally invest, explaining which specific signal (if any) was the deciding factor in your decision. Keep this four-signal checklist — you'll combine it with the next two lessons' red flags into a single protocol-evaluation checklist for your Module 7 capstone.
Recap
- Rug pulls recur around four checkable signals: anonymous teams, concentrated token supply, unaudited contracts, and unlocked liquidity.
- No single signal proves a scam, but several stacking together — especially alongside hype and guaranteed-return promises — is a strong warning.
- All four signals are verifiable yourself, before investing, using public blockchain data and published audit reports — this lesson's checklist is a pre-investment habit, not a post-mortem one.