Category: Frauds → Rug Pulls & Fake ProjectsFraudsRug Pulls & Fake ProjectsLiquidity Rug PullReading time: 12 minutes
Risk level: High
Target audience: DeFi users, liquidity providers, token traders
Risk level: High
Target audience: DeFi users, liquidity providers, token traders
Meet Emeka
Emeka is a 30-year-old software developer in Lagos who made decent returns on Bitcoin and Ethereum. He’s started getting into DeFi—liquidity providing, yield farming, and small-cap tokens with growth potential. One day, he sees a tweet about “GreenYield,” a new token focused on sustainable finance. The pitch:- Environmental impact focus
- 8% reflections to holders
- Liquidity locked for 2 years
- Audit completed by “CertiK”
- Team doxxed (faces and names visible)
- Checks the website
- Reads the whitepaper
- Sees the audit badge
- Confirms liquidity “locked”
What Happened
Step 1: Launch Hype
GreenYield launches on PancakeSwap (Binance Smart Chain). The price climbs immediately. The chart looks healthy. Emeka buys ₦500,000 worth at launch. Within 48 hours, it’s worth ₦750,000 (50% gain). He feels smart.Step 2: The Community Grows
The Telegram group explodes to 20,000 members. Daily updates:- “Partnership with [fake brand]”
- “Listing on [exchange] next week”
- “NFT collection coming”
- “Mobile app Q4”
Step 3: The First Signal
In Week 3, a smart developer in the Telegram group asks:“Can you show us proof of the LP lock? 2-year lock on which platform—Unicrypt or Pinksale?”The founder responds:
“Locked on Pinksale. We’ll provide proof soon.”But “soon” never comes. The developer pushes:
“Provide the lock URL. I want to verify directly on Pinksale.”The founder stops responding in the group. The developer is removed from the group for “FUD.” Emeka should have taken this seriously. But the price is still going up. The auditor badge is still there.
Step 4: The Rug Pull
One week later, the price suddenly spikes 300% in 30 minutes. Emeka thinks it’s about to moon. Then, just as suddenly, it crashes 99%. He checks on-chain. The LP (liquidity pool) has been drained. All funds have been transferred to a single wallet. The Telegram group is locked (no new messages allowed). The website is still up, but the social media accounts are gone. Emeka checks the smart contract on BscScan (Binance blockchain scanner). The contract owner is not the “auditor.” The liquidity was never locked. The founder had full control over the LP the entire time. The fake audit badge was just an image on the website—not a real CertiK audit. The “team” photos on the website were likely stolen from LinkedIn or Google Images. Emeka lost his entire ₦1.5 million investment. He realizes that what he thought was “locked liquidity” was just a promise with no on-chain verification. This is a classic rug pull pattern: creators control the liquidity, hype the token, then drain the LP and disappear. Real case studies include Squid Game (where liquidity was drained instantly) and projects where LP was supposedly “locked” but the creator had a backdoor.Where the Scammer Won
What Emeka Could Have Done (Prevention)
Before Buying
Verify the lock directly on-chain: If liquidity is “locked,” check Pinksale, Unicrypt, or the contract source code. Do not trust screenshots or website claims.
Check the audit: Go to CertiK’s website directly and search for the token. If it’s not there, the audit is fake.
Verify team identities: Reverse-image-search the team photos. If they’re on Google Images or LinkedIn (and don’t match the person), it’s a red flag.
Check contract ownership: Use BscScan or EtherScan to view the contract. Look for: Whether the creator has
burn or drain functions.Check contract ownership: Use BscScan or EtherScan to view the contract. Look for: Whether liquidity is really locked (check for Unicrypt/Pinksale entries).
During the Hype
Stop when questioners are removed: If the community silences skeptics, that’s a major red flag.
Do not chase price spikes: A 300% pump often precedes a dump and rug. Rug pulls often feature sudden price surges before the drain.
Assume no audit unless you verify it: Every rug-pull token displays fake audits.
Red Flags Checklist
If You Already Bought
1
Accept the Loss Quickly
Do not wait for “recovery.” Rugpulled tokens do not recover.
2
Preserve Evidence
Screenshot the contract and on-chain data (BscScan/EtherScan). Keep all Telegram/Discord messages. Record the wallet addresses involved.
3
Report
The token address to ChainAbuse. The creator wallet(s) to law enforcement (if large loss).
4
Do Not Pay Recovery Scammers
See Recovery Scam Trap for more.
How Rug Pulls Actually Work
Step 1: Creation
Step 1: Creation
What happens: Developer creates a token contract with hidden owner controls (like a “drain” function).
Step 2: Launch
Step 2: Launch
What happens: Token is listed on a DEX (PancakeSwap, Uniswap, etc.) with liquidity paired to USDT or BUSD.
Step 3: Hype
Step 3: Hype
What happens: Team/influencers hype the token, price climbs.
Step 4: Trust Signals
Step 4: Trust Signals
What happens: Fake audits, stolen team photos, false partnerships, and lock promises make it look legitimate.
Step 5: Drain
Step 5: Drain
What happens: When price is high and/or volume is sufficient, the creator uses the hidden function to drain the LP wallet. All liquidity is converted and sent to the creator’s address.
Step 6: Collapse
Step 6: Collapse
What happens: Price crashes 99.99%. Holders cannot sell (no liquidity left).
Step 7: Exit
Step 7: Exit
What happens: Creator cashes out via exchanges; social accounts disappear.
Notable Examples
Squid Game Token (2021)
$2.1M stolen. Price surged to $2,862 then crashed to near-zero. Sold out in hours. Liquidity was drained by creators who held exclusive sell rights.
SafeMoon Pattern
While not a full rug (it still exists), it was designed with rug-pull mechanics and struggled with token taxes that made selling difficult for early investors.
Action Steps
To Avoid Rug Pulls
Always Verify On-Chain
Always Verify On-Chain
Check: Check liquidity lock status directly (Pinksale, Unicrypt, or contract). Confirm audit by visiting the auditor’s website directly. View contract on BscScan/EtherScan for ownership, functions, and holder distribution.
Apply the DYOR Checklist
Apply the DYOR Checklist
Verify: Team identity verified (LinkedIn, public records)? Whitepaper explains actual utility (not just hype)? GitHub with active commits, or proof-of-concept? Roadmap with specific, testable milestones? Community that welcomes questions (not removes questioners)?
Risk Management
Risk Management
Rules: Never put in more than you can afford to lose on a small-cap token. Diversify across multiple projects. Withdraw early profits to offset losses on dead projects. Set a stop-loss price (e.g., “if it drops 50%, I sell”).
Report Rug Pulls
Report Rug Pulls
Report: Token address to ChainAbuse (chainabuse.com). Creator wallet to public blockchain monitoring services. Your loss to local law enforcement (they track patterns).
Related Resources
Pump-and-Dump Scam
See how coordinated dumps trap retail traders
Frauds Category
Explore all types of rug pulls and fake projects
Check Your Wallet
Verify if addresses are reported as malicious
Report a Scam
Report fraudulent tokens and addresses