What exactly is a rug pull in crypto?

A rug pull is a scam where a project's creators take investors' money and disappear — by draining the token's liquidity pool, dumping their own token allocation, or abandoning the project. It leaves ordinary holders with tokens they can no longer sell for meaningful value.

Can I get my money back after a rug pull?

Almost never. Blockchain transactions are irreversible, and rug-pull teams are usually anonymous and move funds through mixers or exchanges quickly. This is why prevention — spotting the red flags before you buy — is the only reliable protection.

Is an anonymous team always a sign of a scam?

No. Many legitimate crypto projects have pseudonymous founders. Anonymity only becomes a strong warning when it appears alongside other red flags, such as unlocked liquidity, concentrated token supply, fake partnerships, or a dead codebase. Judge the full cluster of signals, not one in isolation.

How early can you see the warning signs of a rug pull?

Structural red flags — unlocked liquidity, a mint function, concentrated wallets, no vesting, an abandoned repo — are visible from day one, before any price crash. Behavioral signs of a soft rug, like the team quietly selling and halting development, build up over days or weeks. Both are detectable if you check on-chain data before investing.

What free tools help you check for rug pull red flags?

Block explorers like Etherscan, BscScan, and Solscan show holder distribution and contract functions. Liquidity-lock services and token-scanner sites reveal locks and dangerous permissions. Automated radars such as GALAXSI at vekilo.app combine many of these checks across thousands of coins so you don't have to inspect each one manually.

How to Spot a Rug Pull Before It Happens: 6 Red Flags That Actually Matter

Knowing how to spot a rug pull before it happens is one of the most valuable skills in crypto — because once the liquidity is gone, it is gone. A rug pull is when a project's creators drain the money, dump their tokens, or abandon the project after attracting investors. The good news is that most rug pulls leave a trail of warning signs on-chain and in public before they collapse. You just need to know where to look. Below are six concrete red flags you can verify yourself, plus the free tools that surface them.

First, understand the two types of rug pull

There are two broad patterns, and they fail differently:

Hard rug: a fast, malicious exit — the team pulls liquidity, disables selling, or the contract contains code that lets them steal funds. This can happen in minutes.
Soft rug: a slow abandonment — the developers quietly sell their allocation, stop building, and let the token bleed out over weeks. No dramatic hack, just a dead project.

Most of the red flags below catch both types, but hard rugs are usually visible in the contract and liquidity, while soft rugs show up in team behavior and development activity.

Red flag 1: Unlocked or shallow liquidity

Liquidity is the pool of funds that lets people actually buy and sell the token. If the team can withdraw it at any moment, they can drain it and leave holders with worthless tokens.

Check for a liquidity lock. Legitimate projects lock LP tokens in a time-locked contract (services like Team Finance or Unicrypt). No lock, or a lock expiring in days, is a serious warning.
Check the pool size. A tiny liquidity pool relative to the market cap means the price can be manipulated and a single large sell can crash it.
See who holds the LP tokens. If a single dev wallet holds most of the LP, that person controls the exit.

Red flag 2: Unlocked supply and concentrated wallets

Open a block explorer (Etherscan, BscScan, Solscan) and look at the token holder distribution. Ask two questions:

Is the supply concentrated? If a handful of wallets hold 40–60% of the supply, they can dump on you at any time.
Is the team allocation vested? Honest projects lock and gradually release team and investor tokens over months or years. A large, instantly-sellable team allocation is a soft-rug waiting to happen.

Also watch for a mint function — if the contract lets the owner create unlimited new tokens, your holdings can be diluted to zero.

Red flag 3: Anonymous team with no track record

Anonymity alone is not proof of a scam — plenty of legitimate builders stay pseudonymous. But combine an anonymous team with other red flags and the risk multiplies. Look for:

A team with no verifiable history, no prior projects, and stock-photo or AI-generated profile pictures.
"Partnerships" that the supposed partner has never announced.
Fake or recycled audit badges. Click through and read the actual audit report — does it exist, and does it cover this contract?

Red flag 4: Dead or copy-pasted development

Real projects ship code. Check the GitHub repository:

Is there recent, meaningful activity — or was everything committed once and abandoned?
Is the contract a copy-paste of another token with the name swapped out? Duplicated, unaudited code is common in scam factories.

A polished website with an empty or forked codebase is a classic soft-rug signature.

Red flag 5: Malicious contract permissions

This is where hard rugs hide. Even without reading Solidity, token-scanner tools flag dangerous functions:

Trading pause / blacklist: the owner can stop you from selling (a honeypot).
Modifiable taxes: the owner can raise the sell tax to 99% after you buy.
Hidden owner or upgradeable proxy: the "renounced" owner isn't really gone, or the logic can be swapped later.

Red flag 6: Manufactured hype and urgency

Scams engineer FOMO. Be skeptical of guaranteed returns, countdown timers, aggressive paid-influencer shilling, and a community that deletes every critical question. No honest project promises the price will only go up.

Build a checklist and use it every time

No single flag is a verdict — a shallow pool or an anonymous founder can be innocent. Danger comes from clusters: unlocked liquidity plus concentrated supply plus a mint function plus a dead repo is not a coincidence. Run the same checks on every token before you buy, and walk away when several align.

Doing all of this by hand for every coin is slow, and that is exactly the gap GALAXSI was built to close. It continuously scans 17,000+ coins for exactly these traps — thin or unlocked liquidity, unlocked supply, extreme funding, stalled development, and other danger signals — and gives each coin an identity, a history, and a plain-language risk summary. It does not sell you a price prediction or a "guaranteed" signal; it simply shows you the danger so you can decide. You can screen a coin for free at vekilo.app before you commit a single dollar.