RUG.TOOLS
Rug University · Checklist

How to Detect a Crypto Rug Pull Before Buying a Token

You cannot know the future of a token, but you can read the conditions that make a rug possible. This is the order to check them in, what a good and a bad answer looks like at each step, and how to weigh the result when part of the data is unavailable. For definitions first, read what a rug pull is.

Check a Token for Rug Pull Risk

Paste a contract address into Rug.Tools and analyze the token before you buy. Free, no signup — Solana, Ethereum, BNB Chain, Base and Monad.

Run a Rug Pull Check

The seven-step pre-buy check

1

Liquidity protection

Find out who controls the LP. Burned is strongest, locked with a verifiable future unlock date is next, and unlocked with an active owner means protection cannot be confirmed.

Good: LP burned, or 100% locked past a visible date. Concerning: partial lock, near-term unlock, or LP still in the deployer wallet.

2

Holder distribution

Look at the largest holder and the top-10 share, and identify what those addresses are — a burn address, a locker or a CEX wallet is not the same as an anonymous personal wallet.

Concerning: one non-contract wallet above ~10% of float, or a top-10 share above ~50% with no explanation.

3

Creator wallet history

Check the deployer's age, funding source, current balance and how many tokens it has launched. A wallet created an hour before the token, funded by a fresh withdrawal, with three prior launches, tells you most of what you need.

4

Contract permissions

On Solana: mint authority and freeze authority should be revoked. On EVM chains: check ownership, any mint or blacklist function, pause capability, a proxy that can be upgraded, and whether the source is verified. Anything that is not actually checked should read as unknown, never as "fine".

5

Buy and sell tax

Read buy and sell tax as two separate numbers, and check whether the owner can change them. A 5% sell tax is a cost; an owner-adjustable sell tax is an open-ended risk.

6

Market depth and honest volume

Compare market cap to liquidity. A nine-figure valuation on a small pool means the quoted price is not the price you can exit at. Volume many multiples of liquidity, with a flat holder count, usually indicates wash trading.

7

Coordination between wallets

Look for wallets that bought in the same block or share a funding source. Coordinated accumulation is the precondition for a coordinated exit.

How to weigh the answers

Treat these as evidence, not verdicts. Three questions help combine them:

  • Can value leave without holders? Unlocked LP, live mint, active blacklist — any yes is structural.
  • Who can move the price alone? Concentration plus thin liquidity means one wallet decides.
  • How much did you actually verify? Two verified checks out of six is a partial picture, and should be read as limited coverage rather than a clean bill of health.
Low liquidity is a trading risk — slippage and difficulty exiting — not by itself evidence that a token is a scam. Keep those two ideas separate when you judge a report.

Common mistakes

Reading the chart instead of the structure

Price and volume are the cheapest things for an attacker to fake. Supply and liquidity ownership are not.

Treating "renounced" as safe

Renounced ownership freezes the contract. It does nothing about the pool or about who holds the supply.

Trusting a lock without a date

"Liquidity locked" with no unlock date, no share and no locker contract is a claim, not a verification.

Ignoring unavailable data

A blank module is not a passing module. Missing data should lower confidence, not raise it.

Chain-specific notes

  • Solana: mint and freeze authority, LP burn on the AMM pool, and bundled sniper wallets at launch.
  • Ethereum: verified source, owner functions, proxy admin, buy/sell tax and a simulated sell.
  • BNB Chain: as Ethereum, with a higher base rate of tax-and-blacklist templates.
  • Base: as Ethereum; many launches are very young, so pair age and creator history carry more weight.
  • Monad: third-party security screening is not yet available, so analysis relies on direct on-chain contract, creator and market checks — and coverage is reported as limited.

Chain-by-chain walkthroughs: Solana, Ethereum and BNB Chain.

Frequently asked questions

How long does it take to check a token for rug-pull risk?›

The checks that matter most — liquidity lock status, top-holder share, creator wallet history and contract permissions — are all readable on-chain and take under a minute with a scanner. Doing them manually across a block explorer and a DEX page takes closer to ten.

What should I check first?›

Liquidity protection. If the pool can be withdrawn by an active owner, every other positive signal is conditional on that owner choosing not to withdraw it.

Does a high holder count mean a token is safe?›

No. Holder count is easy to inflate by airdropping dust to thousands of addresses. What matters is what share of the float the top wallets control and whether those wallets are related.

What if some checks return no data?›

Treat a missing check as unknown, not as a pass or a fail. Some chains and some data providers simply do not expose holder or LP-lock data. A verdict built on two verified modules deserves less weight than one built on five.

Ruggy scanning a contract address

Analyze a Contract Address

Paste a contract address into Rug.Tools and analyze the token before you buy. Free, no signup — Solana, Ethereum, BNB Chain, Base and Monad.

Run a Rug Pull Check

Keep reading

What Is a Rug Pull?

The full definition, how rug pulls work, and every warning sign in one place.

Read guide
Types of Crypto Rug Pulls

Liquidity pulls, honeypots, malicious minting, hidden taxes and slow rugs — compared.

Read guide
Crypto Rug Pull Checker

Paste a contract address and read the risk signals across five chains.

Read guide