How to spot a rug pull before you buy
A rug pull is when a token's team (or an early whale) drains the liquidity or dumps their supply, leaving you holding a worthless coin. The good news: almost every rug leaves the same on-chain fingerprints — and you can check them in seconds, for free, without connecting your wallet.
The 7 red flags that matter
- Unlocked liquidity. If the LP tokens aren't burned or locked, the dev can pull the pool at any moment. This is the classic rug. Want: 100% locked/burned.
- Live mint authority. If mint authority isn't revoked, they can print unlimited new tokens and dump. Want: revoked.
- Live freeze authority (Solana). Lets them freeze your wallet so you can't sell — a honeypot by another name. Want: revoked.
- Honeypot / sell tax (EVM). You can buy but not sell, or the sell tax is punitive. Instant avoid.
- Whale concentration. One non-LP wallet holding a huge share can crater the price by selling. Check the top holders.
- Insider / bundled supply. Many wallets funded by one source, ready to dump together.
- Fake / thin liquidity. A pool too small to exit, or volume that doesn't match the liquidity (wash-traded).
How to check them in under a minute
You don't need to read Solidity or dig through Solscan by hand. Paste the token's contract address (or just its name) into a free scanner and it reads all seven signals from the chain and gives you a plain-English verdict. GL1TCH does exactly this — non-custodial, any chain — and even keeps watching the token after you buy, so if the liquidity unlocks or an authority comes back, you get pinged.
A safe-looking token can still dump
Passing the contract checks means it isn't a structuralrug — it doesn't mean the price will go up. Thin liquidity, low holder count, and hype with no product are still ways to lose money. Contract-safe + no real traction = high risk of a slow bleed. Always size accordingly and DYOR.
FAQ
Can you spot a rug pull with a free tool?
Yes. The main rug vectors — liquidity lock, mint/freeze authority, honeypot, holder concentration and insiders — are all readable from on-chain data. Free scanners like GL1TCH aggregate them and give a plain-English verdict without you connecting a wallet.
What is the biggest rug-pull red flag?
Unlocked liquidity. If the LP tokens are not burned or locked, the team can remove the pool at any time, which is the classic rug pull. Always confirm liquidity is 100% locked or burned.
Does a locked liquidity mean a token is safe?
It removes the single biggest rug vector, but not all risk. You still need to check mint/freeze authority, taxes, holder concentration and whether there is real trading — a locked but abandoned token can still go to zero.
GL1TCH is a free, non-custodial scanner that runs all of these checks for you in seconds — on any token, any chain.