What Is a Rug Pull?
A rug pull is a type of cryptocurrency scam where developers create a token, build hype around it, attract investors — and then suddenly drain all the liquidity or dump their holdings, leaving buyers with worthless tokens. On Solana, where new tokens launch every few seconds through platforms like Pump.fun and Raydium, rug pulls have become the most common threat facing memecoin traders.
The good news? Most rug pulls follow predictable patterns. If you know what to look for, you can avoid the vast majority of them. This guide breaks down the 7 most critical red flags, explains the on-chain mechanics behind each one, and shows you how to verify them before risking your money.
Red Flag #1: Mint Authority Is Still Enabled
What it means: The token creator can mint (create) unlimited new tokens at any time, instantly diluting your holdings to zero.
How it works: Every SPL token on Solana has a “mint authority” — an address with the power to increase the total supply. Legitimate projects revoke this authority after launch, permanently locking the supply. Scam tokens keep it enabled so the creator can print millions of new tokens and dump them on the market.
How to check:
- On TokenRadar, the Safety tab shows mint authority status with a clear ✓ (revoked) or ✗ (enabled) indicator
- On Solana Explorer, look for the “Mint Authority” field — if it shows an address instead of “null”, the authority is still active
- Use the
getMint()function from@solana/spl-tokento check programmatically
Verdict: If mint authority is enabled, treat the token as extremely high risk. There is no legitimate reason for a fair-launch memecoin to keep this power active.
Red Flag #2: Freeze Authority Is Still Enabled
What it means: The creator can freeze any wallet’s tokens, preventing them from selling.
How it works: Freeze authority allows the token issuer to lock individual token accounts. In a rug pull scenario, the creator freezes all buyer wallets, then drains the liquidity pool — buyers literally cannot sell, even if they see the price crashing.
How to check:
- TokenRadar’s safety analysis checks this automatically — look for the freeze authority indicator
- On-chain: Check if the token’s freeze authority field is set to an address or null
Verdict: Freeze authority + mint authority together is the classic scam pattern. If both are enabled, the token is almost certainly a rug pull waiting to happen.
Red Flag #3: Top Holders Own More Than 50% of Supply
What it means: A small number of wallets control the majority of the token, giving them the power to crash the price at will.
How it works: In a healthy token distribution, the top 10 holders might control 20-30% of the supply. In a rug pull setup, the creator splits tokens across multiple wallets (often 5-20 wallets) that collectively hold 70-95% of the supply. When they coordinate a dump, the price collapses instantly.
Warning signs by concentration level:
| Top 10 Holder % | Risk Level | What It Means |
|---|---|---|
| < 30% | Low | Well-distributed, healthy token |
| 30% – 50% | Moderate | Somewhat concentrated, watch closely |
| 50% – 70% | High | Significant dump risk |
| > 70% | Critical | Extreme risk — likely insider-controlled |
How to check:
- TokenRadar shows top holder concentration percentage and holder count on every token’s detail page
- Use Solana’s
getTokenLargestAccountsRPC method to see the biggest holders - Cross-reference holder wallets — if multiple large holders were funded from the same source wallet, they’re likely the same person
Red Flag #4: Liquidity Is Not Locked or Is Extremely Low
What it means: The creator can pull out all the liquidity from the trading pool at any time, making the token untradeable.
How it works: When a token is listed on a DEX like Raydium, the creator adds liquidity — a pool of the token paired with SOL or USDC. If these LP (Liquidity Provider) tokens aren’t locked or burned, the creator can simply withdraw the entire pool. This is the most straightforward form of rug pull: one transaction and all the SOL/USDC is gone.
Liquidity thresholds to watch:
| Liquidity (USD) | Assessment |
|---|---|
| > $50,000 | Strong — significant capital committed |
| $10,000 – $50,000 | Moderate — functional but watch for sudden removal |
| $1,000 – $10,000 | Low — high slippage, easy to manipulate |
| < $1,000 | Critical — likely not a real project |
How to check:
- TokenRadar displays liquidity in USD for every tracked token
- Check if LP tokens are burned (permanent lock) or sent to a locker contract
- RugCheck.xyz provides LP lock percentage data
Red Flag #5: RugCheck Score Is High Risk
What it means: Automated analysis tools have identified multiple risk factors in the token’s on-chain data.
How it works: RugCheck is a widely-used Solana tool that analyzes token contracts for known scam patterns. It checks mint authority, freeze authority, LP status, metadata manipulation, and dozens of other factors to produce a normalized risk score.
What RugCheck looks for:
- Mutable metadata (creator can change the token name/image after launch to impersonate legitimate projects)
- Low LP lock percentage
- Insider trading patterns
- Copycat token names targeting popular projects
- Suspicious holder distribution
How TokenRadar uses this: TokenRadar integrates RugCheck data into its weighted safety scoring system. The RugCheck risk assessment accounts for 25% of the overall safety score, combined with 5 other on-chain factors for a comprehensive view.
Red Flag #6: Very Low Holder Count
What it means: Almost nobody is actually holding the token — it may be artificially inflated by wash trading or bot activity.
How it works: A legitimate token with genuine community interest will naturally accumulate holders over time. A scam token might show impressive trading volume but have only 5-10 unique holders. The “activity” is often just bots trading back and forth to create the illusion of demand.
Healthy holder count benchmarks:
| Holder Count | Assessment |
|---|---|
| 100+ | Strong community interest |
| 50 – 99 | Growing — early but promising |
| 20 – 49 | Very early — higher risk |
| < 20 | Minimal adoption — likely insider-only |
Pro tip: Don’t just look at the holder count — check how quickly it’s growing. A token that went from 5 to 200 holders in 30 minutes might be bot-driven, while steady organic growth from 10 to 100 over several hours is a healthier sign.
Red Flag #7: No Social Presence or Copied Branding
What it means: The project has no verifiable team, no community, and may be impersonating a legitimate project.
How it works: Scammers frequently create tokens that mimic the name, logo, and branding of popular memecoins or upcoming projects. They might create a token called “BONK2” or “Official Dogwifhat” to trick traders into thinking it’s associated with the real project. Some go further, creating fake Twitter accounts and Telegram groups that are abandoned immediately after the rug pull.
How to verify:
- Check the token’s contract address against the official project’s website or announcement
- Look for the token on DexScreener or Birdeye — legitimate projects usually have verified profiles
- Search the token name on Twitter — is there an active community, or just bot accounts?
- Check if the token’s metadata is mutable — scammers often change the token name/image after launch
How TokenRadar’s Safety Scoring System Works
Instead of checking each red flag manually, TokenRadar automatically analyzes every new Solana token using a weighted safety scoring system that evaluates 6 on-chain factors:
| Factor | Weight | What It Checks |
|---|---|---|
| RugCheck Analysis | 25% | Comprehensive contract risk assessment |
| Mint Authority | 20% | Can the creator print more tokens? |
| Freeze Authority | 15% | Can the creator freeze your wallet? |
| Holder Concentration | 15% | How concentrated is the token distribution? |
| Holder Count | 10% | How many unique wallets hold the token? |
| Liquidity | 15% | How much trading liquidity is available? |
Each factor is scored from 0 to 100, and the weighted average produces a final safety score:
- Safe (70-100): Multiple positive indicators — lower risk
- Warning (40-69): Mixed signals — proceed with caution
- Danger (0-39): Multiple red flags detected — high risk of rug pull
Override rules ensure that confirmed rugged tokens always show as Danger, and the classic scam pattern (mint + freeze + high concentration) is immediately flagged regardless of other factors.
A Practical Safety Checklist
Before buying any Solana memecoin, run through this checklist:
- Check the safety score — Is it Safe, Warning, or Danger on TokenRadar?
- Verify mint authority — Is it revoked? If not, walk away.
- Verify freeze authority — Is it revoked? Both enabled = almost certain scam.
- Check holder distribution — Are the top 10 holders under 50%?
- Check holder count — Are there at least 20+ unique holders?
- Check liquidity — Is there at least $5,000 in the pool?
- Verify the project — Does it have a real community, or is it a copycat?
- Never invest more than you can afford to lose — Even “Safe” tokens carry risk in the memecoin space.
Final Thoughts
Rug pulls thrive on speed and emotion. Scammers create urgency — “this token is pumping, buy now before it’s too late!” — because they know that traders who stop to do research will see the red flags. The 30 seconds it takes to check a token’s safety score on TokenRadar could save you from losing your entire investment.
Remember: in the memecoin market, the house edge belongs to those with better information and better tools. Don’t ape blindly. Check the data. Trust the chain, not the hype.
Start scanning tokens for free at tokenradar.site — real-time detection, safety analysis, and live charts for every new Solana token.