How rug pulls work and how to spot one. Below that, newly launched tokens on Ethereum, Base, BNB Chain and Solana whose contracts or liquidity trip objective automated checks, and liquidity pulls we have confirmed on-chain.
Signals, not accusations. The high-risk list shows which automated checks fired on a token. It does not say that anyone has done anything wrong, and a check can be wrong. Only a liquidity pull we have confirmed on-chain is stated as fact, and it always links to the transaction. A token missing from this page is not a safe token. Nothing here is investment advice. Project teams can ask for a listing to be reviewed.
Paste a contract address (or a Solana mint) to run the same checks live. The result is not stored and is not a listing. Limited to a few checks per minute.
New pools paired with a major asset (ETH, BNB, SOL, USDC or USDT) that reached at least $5,000 of liquidity, checked at discovery and again at 1, 24 and 72 hours. Each listing names the signals that fired.
Pools where the quote side fell to 10% or less of its peak, and removal transactions sent by the token's deployer or its first liquidity provider took out at least 90% of it, within 30 days of launch. Each links to the transaction.
A rug pull is when the people behind a token take the money buyers put in and leave them holding something they can't sell for much. Four patterns cover most cases.
The contract lets you buy but blocks or heavily taxes selling, so the price only goes up on the chart while nobody but the owner can get out.
The owner keeps the power to create new tokens, mints a large amount, and sells it into the pool, draining the ETH, BNB or SOL that buyers paid in.
The deployer holds the pool's liquidity tokens unlocked and withdraws them, taking the paired asset out of the pool. The token is left with no market.
Trading starts with low taxes, then the owner raises the sell tax (sometimes to 100%) or blacklists wallets, trapping holders after they've bought.
The rule is fixed and published; there is no hidden score. A check whose source didn't answer is shown as "not checked" and never counts either way.
High risk: any one critical signal fired, or three or more moderate signals fired.
Elevated: one or two moderate signals fired, and no critical signal.
No signal fired does not mean a token is safe: checks can be incomplete, and a token can change after we look.
| Signal | Weight | How it's checked |
|---|---|---|
| Loading… | ||
Sources: GoPlus token security (buy/sell simulation and contract flags), RugCheck (Solana), Etherscan-family explorers, DexScreener (Uniswap v4 liquidity), and our own reads of the chains. Discovery reads new pools straight from the DEX factories and launch programs, not from paid listings.
Once a day: stablecoin prices and peg health, plus the day's count of new high-risk tokens and confirmed pulls.
Browser notifications store only your browser's push subscription (an address your browser's push service gives us, and its keys). No name, email or IP. Turning them off deletes it. See the privacy policy.
If you're responsible for a listed token and think a listing is wrong, tell us why. An operator reviews every request. If the request is upheld, the listing is removed and the decision is logged.