Rug Pulls Explained: How Meme Coins Vaporize Overnight

Rug Pulls Explained: How Meme Coins Vaporize Overnight

On January 12, 2026, former New York City Mayor Eric Adams stood in Times Square and launched his own cryptocurrency, the Solana-based "NYC Token." Within hours, its market cap had surged to roughly $600 million. Then a wallet tied to the launch pulled the liquidity, the price collapsed more than 75% the same day, and the token's value settled around $110 million — a fraction of its peak, according to reporting from Fortune and CoinDesk. Blockchain analytics firm Bubblemaps traced roughly $1 million in proceeds to the developer wallet before the crash.

Crypto observers had a name for it before the dust even settled: a rug pull. Somebody built a floor under a token, got a crowd standing on it, and yanked it out from under them.

Here's the thing — rug pulls aren't some obscure DeFi glitch. They're one of the most common tricks in the broader world of crypto scams, and the mechanics are almost embarrassingly simple once you know what you're looking at.

How a Rug Pull Actually Works

A rug pull happens when the people behind a crypto token design it — or manipulate it after launch — so they can walk away with investors' money while the token itself becomes worthless. There are three main ways it happens, and most rug pulls use at least one of them.

The liquidity pull. When a token launches on a decentralized exchange, its creators typically pair it with a "real" asset (like Ethereum or Solana) in a liquidity pool, which is what lets people actually buy and sell it. If the creators control that pool — and haven't locked it — they can withdraw their side of it at any moment, instantly tanking the price to near zero and walking away with whatever real money got paired against the meme coin. This is what happened with the NYC Token: the liquidity pool got drained, and the price followed it down.

Mint authority abuse. Some token contracts leave the creator with the ability to mint unlimited new tokens after launch. If that "mint authority" hasn't been renounced, the developer can flood the market with new supply out of nowhere, crushing the value of everyone else's holdings while cashing out at the top.

The honeypot. This one's uglier. The token's smart contract is written so that investors can buy in freely, but a hidden function blocks them from ever selling. Prices climb because people can only buy, never sell — until the developers, who exempted their own wallets from the sell restriction, cash out everyone else's money at once. The 2021 Squid Game token (SQUID) is the textbook case: riding the Netflix show's popularity, its price rocketed to $2,860 before developers vanished with an estimated $3.3 million, leaving buyers holding tokens they were never able to sell in the first place.

There's also the "soft rug" — no dramatic liquidity drain, just a team that quietly stops posting, stops building, and disappears, leaving holders with a coin nobody's trading anymore. Slower, less cinematic, same result: your money's gone.

Crypto scams and fraud stole an estimated $17 billion in 2025, according to Chainalysis's 2026 Crypto Crime Report — and rug pulls are a meaningful chunk of that, especially on chains like Solana and Base where launching a new token costs almost nothing and takes minutes.

Why This Is Harder to Spot Than a Typical Pump-and-Dump

A classic pump-and-dump at least requires some effort — someone has to hype a real, tradeable asset until enough people buy in, then sell into the rally. A rug pull skips half that work. The "product" was never meant to hold value in the first place; the hype is the entire business model. There's no earnings report to check, no company to research, no history to look up, because the token might be a few hours old.

It's also dressed in legitimacy that older scams never had. A slick website, a Telegram with thousands of members, a countdown timer, an "audit" badge from a firm nobody's heard of — all of it can be assembled in an afternoon. Compare that to a fake crypto exchange, which at least has to imitate something real, or a pig butchering scam, which requires weeks of manufactured relationship-building before the financial ask. A meme coin skips all of that groundwork. It just has to imitate excitement, and excitement is cheap to fake.

The Red Flags Hiding in Plain Sight

• Liquidity isn't locked. If you can't verify the liquidity pool is locked (usually via a locker service, checkable on-chain) for a set period, the creators can drain it whenever they want.
• Ownership hasn't been renounced. Check whether the contract's owner still has mint or admin privileges. If they do, they can change the rules after you've bought in.
• You can't sell a test amount. Buy the smallest amount the platform allows, then immediately try to sell a fraction of it back. If the sell fails or gets taxed at an absurd rate, you've found a honeypot before it cost you real money.
• Ownership is concentrated in a handful of wallets. If a small number of wallets — often the team's own — hold a huge share of total supply, they can crash the price the moment they decide to sell.
• The team is anonymous with no track record. Real projects, even small ones, usually have some public history. "Anon devs" with no prior projects and stock-photo Twitter avatars are a coin flip at best.
• Hype outpaces substance. A countdown timer, a promise to "10x by Friday," and a Discord full of bots hyping the price are marketing, not fundamentals.
• The launch is tied to a celebrity or public figure's name recognition rather than the product. Borrowed trust from a famous name is doing all the persuading — which is exactly what happened with the NYC Token.

If This Already Happened to You

First: this isn't a you problem. Scammers built the entire mechanism specifically so a smart, careful person could still get caught — that's what a honeypot contract is for.

Don't engage with anyone who DMs you claiming they can "recover" your funds for a fee. That's a second scam aimed specifically at people who just lost money to the first one, and it's extremely common in the hours after a rug pull goes viral. There is no legitimate service that needs an upfront payment to trace a blockchain transaction.

Do report it. File a complaint with the FBI's Internet Crime Complaint Center (IC3) and review the SEC's investor alert on crypto asset scams — rug pulls involving unregistered securities or clear fraud can fall under SEC or DOJ jurisdiction, and documented reports help investigators build cases even when individual recovery isn't realistic. If you're not sure whether a follow-up message, "recovery agent," or new investment pitch is legitimate, run it through our scanner before you engage further.

How to Not Become the Next Victim

Free contract-scanning tools exist specifically for this, and using one takes less time than reading this sentence twice. DexScreener shows you real-time liquidity and trading data for a token. RugCheck and GoPlus Security analyze a contract for red flags like unlocked liquidity, mint authority, and ownership concentration before you buy. Honeypot.is simulates a buy-and-sell to check whether you'd actually be able to exit the position. None of these guarantee safety, but together they catch the overwhelming majority of obvious rug pulls before your money's on the line.

Beyond the tools: treat every new token the way you'd treat any other unregistered investment scam pitch, because that's exactly what it is. Only invest what you'd be completely fine losing — not "what I can afford to lose" as a hopeful phrase, but an amount that genuinely wouldn't change your week if it hit zero. And be honest with yourself about FOMO. The entire rug-pull business model depends on you feeling like you're about to miss out on something. That feeling is the product being sold to you, not a signal that the opportunity is real.

FAQ

Is a rug pull illegal? Often, yes. When a rug pull involves intentional fraud, misrepresentation, or an unregistered securities offering, it can violate U.S. securities law, wire fraud statutes, and money laundering laws. Enforcement is difficult when developers are anonymous or overseas, but it isn't a legal gray area — it's fraud with extra steps.

Can I get my money back after a rug pull? Rarely, and almost never quickly. Once liquidity is pulled or a honeypot contract blocks selling, the funds are typically gone or moved through mixers designed to make tracing difficult. Report it anyway — recovery is the exception, not the rule, and anyone contacting you promising guaranteed recovery for a fee is running a second scam.

What's the difference between a rug pull and a pump-and-dump? A pump-and-dump involves hyping a real, tradeable asset until the price rises, then selling into that rally — the asset survives, just at a lower price. A rug pull typically ends the token's ability to trade at all, either by draining the liquidity that gives it value or by blocking sales outright through a honeypot contract.

Are all meme coins scams? No, but the category has an unusually high concentration of scams because launching one is cheap, fast, and largely anonymous. Treat every new meme coin as unproven until you've checked liquidity locks, contract ownership, and sell-ability yourself — regardless of how it's being marketed.

How can I tell if liquidity is actually locked? Legitimate projects lock liquidity through a third-party locking contract (like Unicrypt or Team Finance) for a stated period, and that lock is verifiable on-chain — you're not taking the team's word for it. If a project just tells you liquidity is "safe" without pointing to a verifiable lock, treat that as unlocked until proven otherwise.

The technology behind a rug pull is new. The con underneath it isn't — it's the same "give me your money for a piece of something amazing" pitch that's worked since long before blockchains existed. The tell is still the same, too: anything that needs you to hurry up and stop asking questions is the part they don't want you to look at closely.

Sources: Chainalysis 2026 Crypto Crime Report, SEC Office of Investor Education and Advocacy, Fortune, CoinDesk, Wikipedia (2021 Squid Game cryptocurrency scam)