The anatomy of a rug pull: how scam tokens work and how to spot them
Rug pulls follow predictable patterns. Knowing the playbook is how you avoid being the exit liquidity.
28/04/2026 · 10 min de leitura · Security · Scams · Memecoins
What a rug pull actually is
A rug pull is when the creators of a token drain the liquidity pool, abscond with the money, and leave holders with a worthless asset. It's the most common scam in crypto.
Variants: hard rug (developer dumps and disappears), soft rug (developer gradually sells and stops support), honeypot (you can buy but the contract prevents selling). All three end with users holding tokens they can't sell.
Total losses to rug pulls have been in the billions per year throughout 2021-2025. Most happen on Solana memecoins and BSC tokens because launch is fast, regulation is minimal, and retail buys aggressively.
The typical lifecycle
Day 0: Token launches on a DEX with a small liquidity pool ($10k-$50k). Developer holds 20-50% of supply. Promotion begins on Twitter/Telegram.
Day 1-7: Influencers (paid or owned by the dev) promote the token. Price runs 5-50x on momentum. Volume builds.
Day 7-30: Volume peaks, narrative spreads to broader retail, price puts in a top. The dev starts gradually selling.
Day 30+: Price crashes 90%+ as the dev exits. Liquidity dries up. The Telegram goes silent or pivots to the next project.
Red flags that show before the dump
Anonymous team. "Anon devs" can be legitimate but the bar is high. Without identity, there is no accountability when things break.
No audit, or audit by a no-name firm. Real audits are public PDFs from firms with track records (Trail of Bits, OpenZeppelin, Quantstamp). Anything else is decoration.
Liquidity pool not locked or not burned. If the LP tokens are in a wallet the dev controls, they can pull liquidity at any time. Locked LP = LP tokens sent to a smart contract that releases them after a defined period.
Whale concentration. If 60% of supply is in 5 wallets, those wallets can dump on you. Check the contract's holder distribution on Etherscan/Solscan.
How to check before buying
Contract verification. The contract source code should be public and verified. Unverified contracts hide their logic. Sometimes a verified contract still has malicious functions; read them or have someone you trust read them.
Token honeypot scanners. Tools like Honeypot.is, GoPlus, and Token Sniffer test whether you can sell. Run the token through these before buying.
Holder analytics. Bubblemaps, Arkham, and similar tools visualize the wallet network. If 10 wallets all received the token from a single funder, that's a signal.
Dev wallet history. Has the dev launched other projects? Were they successful or did they end in dumps? Onchain history is brutal.
Soft rug patterns
The dev sells gradually instead of at once. Each sell pushes price down a bit. They post in the Telegram "the price is consolidating, accumulate." Retail buys the dips.
Eventually the dev's allocation is mostly gone. Project loses momentum. New product launches that were promised don't ship. The community fragments.
Soft rugs are harder to identify in real time. The signal is reduced dev engagement combined with steady price decline. By the time you notice, the dev has already moved on.
Honeypots
A honeypot contract lets you buy but blocks selling. You see the price rising in your wallet but when you try to sell, the transaction fails with various excuses (slippage too high, blacklisted, etc).
Honeypots are usually caught quickly by automated scanners. The danger is buying in the first hour before scanners have flagged it.
Rule of thumb: if you can't sell a tiny test amount within an hour of buying, exit any way you can. Some honeypots have escape clauses (paying the dev a fee) but most don't.
What survival looks like
Don't FOMO into tokens you saw posted 2 hours ago by an influencer. By the time you see it, the smart money is already exiting.
If you must participate in memecoin season, treat every position as 0-EV before evidence to the contrary. Size accordingly: $50-$200 per coin, max.
Take profits aggressively. If you're up 10x, sell 50%. Up 50x, sell another 50%. You've now extracted your principal plus profit. What's left is house money.
What OFFCODE does about this
We don't list tokens without a minimum standard. Tokens need a real audit, locked liquidity (or sufficient public float), known team or strong governance, and a clear use case. Most rugs would fail our listing review.
If you want to play memecoins, you'll need to go to DEXs on Solana or BSC. That's a real risk you take on. Most users should not.
The cleaner path: hold majors (BTC, ETH, SOL), trade on regulated venues with depth, ignore the memecoin lottery. The expected return of memecoins, after survivorship bias, is strongly negative.
Bottom line
Rug pulls work because retail wants 1000x returns and accepts no diligence. The asymmetry is real: most rugs go to zero, the rare survivor goes to billions. But the math of expected value, even on the survivors, is brutal.
Pattern recognition is the best defense. Anonymous team + no audit + locked Telegram + influencer promotion + recent launch = avoid. If you must, size like you expect to lose everything. Because most of the time, you will.