What is Rug pull?

A rug pull is an exit scam in which the people behind a token or a protocol remove the value and leave holders with worthless assets. The classic form is pulling liquidity: the creators, who own most of a pool, withdraw it, and the token can no longer be sold. Variants include minting unlimited supply and dumping it, a contract that quietly blocks selling, and a project that raises money and disappears.

Rug pulls are possible because most of the safeguards are optional. A token contract can retain a mint authority; a pool's liquidity can be unlocked; a project can hold a large share of supply in a few wallets. Each of these is visible on the chain before anyone buys, which is why the first rule of memecoin trading is reading the contract, or letting a scanner read it.

The tell-tale signs repeat: liquidity that is not locked, a supply concentrated in a handful of addresses, a contract that cannot be verified, a team that cannot be named and a launch that is all urgency. None of these proves a rug; all of them together usually do.

For an established portfolio the exposure is usually indirect: an old approval to a contract that turns out to be malicious, a token that arrived unasked and asks to be interacted with, or a DeFi protocol whose admin keys were never given up. Revoking stale approvals and preferring protocols with renounced or multisig-controlled keys closes most of it.

A tracker cannot prevent a rug, but it can keep the aftermath honest: TrueHold prices only against real liquidity, so a token whose pool has been pulled drops out of the total instead of haunting it at a stale price, and the wallet's history keeps the record of what was bought and when.

Recovery is rare. Funds moved through mixers and bridges are seldom traced back, and legal action across jurisdictions is slow and expensive. Prevention, meaning small sizes and reading the contract, is the only reliable defence.