What is a rug pull?
A rug pull is when the developers of a DeFi project exploit their admin access to drain the protocol's funds and disappear. The term comes from the phrase "pulling the rug out from under" investors.
Types of rug pulls
Hard rug pulls — developers use malicious code (hidden backdoors, mint functions) to steal funds directly. These are outright fraud.
Soft rug pulls — developers gradually sell their token allocation, crashing the price, then abandon the project. Technically legal but ethically equivalent.
Liquidity removal — developers remove the liquidity they provided, making the token impossible to sell.
Red flags to watch for
- No audit or low-quality audit
- Anonymous team with no track record
- Contract ownership not renounced
- Liquidity not locked
- Unrealistic yield promises (1000%+ APY)
- No public code (unverified contract)
- Pressure to invest quickly
How to protect yourself
- Check contract renouncement — on BscScan, verify the owner is the zero address
- Check liquidity lock — use tools like Mudra or Team Finance to verify LP tokens are locked
- Read the audit — not just the badge, the full report
- Check contract verification — unverified contracts are a major red flag
- Research the team — doxxed teams are accountable