Snowballr provides financial education, not investment advice. Verify any advisor on FINRA BrokerCheck.
Snowballr
More
GuidesProtect your moneyScenariosEmbed on your site
Free · No sign-up required
Investor protection · 8 min

Crypto rug pulls: when the developers vanish with the money

A 'rug pull' is when the developers of a cryptocurrency project suddenly drain the project's liquidity pool, sell their pre-mined tokens, or simply abandon the project — leaving holders with worthless tokens. The term comes from 'pulling the rug out.' Most rug pulls are deliberate exits planned from day one, dressed up as legitimate startups with whitepapers, social media presence, and 'roadmaps.'

By the numbers

Chainalysis reported $2.8 billion lost to rug pulls in 2021, representing 37% of all crypto scam revenue that year. The 2022–2023 numbers fell as crypto markets cooled but rug pulls remain the dominant fraud pattern in DeFi and meme-coin spaces.

How it works

  1. Anonymous team launches a token with a slick website, a whitepaper full of buzzwords (DeFi, AI, gaming), and an aspirational roadmap.

  2. Initial promotion via Twitter influencers, Discord/Telegram communities, and paid 'reviews' on YouTube.

  3. Liquidity pool created on a DEX (Uniswap, PancakeSwap). Early buyers see price climb as demand grows.

  4. FOMO drives more buyers. Price often climbs 5–50× over days or weeks.

  5. When the team decides 'enough,' they execute the exit: drain the liquidity pool, dump pre-mined tokens, or both — often via flash bot transactions in a single block.

  6. Token price collapses to near-zero. Social media accounts are deleted within hours. Funds are routed through tornado mixers or cross-chain bridges within minutes.

Red flags

  • Anonymous team — no real names, LinkedIn profiles, or photos that reverse-image-search to other identities.
  • Liquidity not locked, or locked for only days/weeks. Locked-liquidity contracts on Unicrypt or Team.Finance should show 12+ months for legitimate projects.
  • Smart contract has 'mint' function the team can call at any time, or admin functions to pause transfers.
  • Top 10 wallets hold a large concentration of supply (over 30%) — they can dump and crash the price.
  • No external smart-contract audit by a reputable firm (CertiK, OpenZeppelin, Trail of Bits).
  • Roadmap promises ambitious deliverables (mainnet launch, exchange listings, partnerships) that never have verifiable confirmations.
  • Aggressive 'launch hype' on Twitter without substantive technical content. The 'use case' makes no sense or is a buzzword salad.

Real cases

Squid Game token (2021)

Riding the Netflix series's popularity, anonymous developers launched a 'Squid Game'-themed token. Buyers couldn't sell — the contract had a hidden anti-sell function. After the price hit $2,856, developers drained $3.4M from the liquidity pool and disappeared. Token went to zero in minutes. The Squid Game franchise had no involvement.

AnubisDAO (2021)

Wolf-themed DeFi project raised $60M in 20 hours from speculators chasing the next OlympusDAO. Nine hours after fundraising closed, all funds were transferred to a new wallet and bridged through multiple chains and mixers. The team — known only by Discord handles — disappeared. No code was ever shipped.

Thodex (2021)

Turkish crypto exchange Thodex froze withdrawals citing 'maintenance,' then the founder fled the country with an estimated $2 billion in user funds. Hundreds of thousands of customers were affected. The founder was eventually extradited in 2022 and sentenced to 11,196 years in prison in 2023.

If you've been targeted

  1. Stop buying. If a project starts pumping with anonymous team and no audit, walk away regardless of social-media hype.
  2. If you already hold a suspicious token: try to sell. Most rug pulls happen rapidly — if you can still sell at any price, do it.
  3. Document your transaction hashes, the contract address, and any team communications.
  4. Report to the FBI IC3 (ic3.gov), the SEC if the token plausibly met the Howey test, and the FTC.
  5. Do not pay any 'recovery service' that contacts you offering to retrieve funds — these are follow-up scams targeting rug-pull victims specifically.
  6. Consider this the cost of touching unregulated crypto. Rebuild a savings plan with our compound-interest calculator using realistic 7-10% expectations on diversified index funds.

FAQ

How can I tell a rug pull from a legitimate crypto project?

+
Three filters cut out 95% of rug pulls. (1) Real, doxxed team members with verifiable backgrounds. (2) External smart-contract audit by CertiK, OpenZeppelin, or Trail of Bits. (3) Locked liquidity for 12+ months on Unicrypt or Team.Finance. Even with all three, crypto projects can still fail — but a project missing any of the three is dramatically higher-risk. Add 'top 10 wallet concentration under 30%' as a fourth check.

Is buying established cryptocurrencies (Bitcoin, Ethereum) safer?

+
Safer from rug pulls — there's no team that can drain liquidity. But the broader market risks remain: extreme volatility (Bitcoin has had multiple 70-80% drawdowns), regulatory uncertainty, exchange failures (FTX, Mt. Gox), self-custody risks (lost keys, hacked wallets). For most retail investors, allocating any crypto exposure to BTC/ETH at 5% or less of total portfolio is the standard 'speculative bucket' approach.

Are NFTs susceptible to rug pulls?

+
Yes, very. The pattern is similar: anonymous team, hyped 'roadmap' (token launch, game, metaverse access), aggressive Discord recruiting. After mint, team disappears. NFT marketplaces aren't responsible for project teams' actions. Floor price collapses to a fraction of mint price within weeks. The same red flags apply: doxxed team, audited contracts, transparent treasury management.