How to Avoid Rug Pulls: Solana, Ethereum & Base Guide 2026

Intent check: This page is the broader multi-chain rug-pull framework for Solana, Ethereum, and Base. If you only want the Solana-specific red flags and token-structure checks, read How to Avoid Rug Pulls on Solana.

If you have lost money to a token that crashed to zero overnight, drained its liquidity pool in a single transaction, or refused to let you press the sell button, you have already met a rug pull. The 2024 to 2026 memecoin cycle made these scams more frequent, more profitable, and more multi-chain than ever, with Solana, Ethereum, and Base all producing nine-figure losses for retail traders who skipped the basics.

This guide turns rug pull prevention into a repeatable process you can run in a few minutes before any trade. It covers the definition, the major rug pull types, the most cited real-world cases (from SQUID in 2021 to LIBRA in 2025), a 10-point red flag checklist, and the exact scanner stack you need on Solana versus Ethereum and Base. Bookmark it. Run it before every entry.

There is no perfect scam filter. There is, however, a clear gap between traders who lose to the same scam pattern every cycle and traders who avoid 90% of obvious traps by checking liquidity locks, holder distribution, owner permissions, and deployer history before they buy. This article is built to put you in the second group.

What Is a Rug Pull? Definition and Core Mechanics

A rug pull is the crypto equivalent of a confidence trick. A team launches a token, generates excitement on social media, attracts buy pressure into a thin liquidity pool, and then exits with the value before holders can react. The "rug" refers to the liquidity that gets yanked out from under buyers, leaving the token tradable on paper but worthless in practice.

The reason rug pulls dominate crypto scam statistics is structural. Anyone can deploy an Ethereum-style ERC-20 token in under an hour with no audit, no team disclosure, and no legal accountability. On Solana, the launch friction is even lower thanks to permissionless platforms like Pump.fun. Combined with the speculative appetite of memecoin season, this creates a perfect environment for opportunistic scammers.

Not every failed token is a rug pull. Honest projects fail when product or narrative does not land. A rug pull is defined by intent: the team designed the token (or its contract permissions) so that an exit was possible, and they used those permissions to extract value at the expense of token holders. Sometimes the intent is obvious from day one. Sometimes it shows up only after months of seemingly normal operation.

The Five Types of Rug Pulls Every Trader Must Recognize

Treating every scam as one bucket is the fastest way to miss the second-most common variant. Each rug pull type has a different signature, a different red flag set, and a different optimal defense. Here are the five categories you will see in 2026.

Understanding which type you are screening for changes the priority of your checks. For honeypots, contract permissions and a sell-side simulation matter most. For liquidity pulls, LP lock status and percentage locked matter most. For slow rugs, top wallet behavior over time is the dominant signal. For dev mint dumps, the mintAuthority on Solana or the contract's mint function on EVM is the single decisive variable.

Historical Rug Pulls: A Brief Hall of Shame

Real cases sharpen instincts in a way generic warnings never will. These are the scams every serious trader should be able to name and explain, because the same patterns recur every cycle with new tickers and new chains.

SQUID Token (November 2021)

Inspired by the Netflix show "Squid Game", SQUID launched on BSC, surged from $0.01 to over $2,800 within a week, and then crashed to near zero in five minutes when the team triggered a sell restriction in the contract code (a honeypot) and drained around $3.3 million in liquidity. Holders were trapped: they could buy but could not sell. The scam exploited brand-recognition FOMO and was visible in the contract before the rug, but few buyers bothered to read the code.

AnubisDAO (October 2021)

AnubisDAO raised approximately $60 million in ETH within 20 hours of launching a liquidity bootstrapping pool, then the multisig wallet holding the funds was emptied to a single address. The team was anonymous, the launch was untested, and there was no time-lock on the LBP funds. It became the textbook case for "anonymous team plus large raise plus no time-lock equals exit risk".

Frosties NFT (January 2022)

Frosties was an NFT mint that raised around $1.3 million on Solana, then the founders disabled the Discord, deleted the website, and disappeared. The case is notable because the FBI later arrested the two perpetrators, marking one of the first NFT rug pull prosecutions. It demonstrated that even off-chain identity can sometimes be unmasked, but the recovery for most victims was minimal.

Iron Finance / TITAN (June 2021)

Not a classic rug pull but worth knowing: Iron Finance's algorithmic stablecoin design collapsed in a bank-run cascade, with the TITAN token going from $64 to near zero in hours. It taught the market that flawed tokenomics can produce rug-pull-equivalent losses without any malicious intent, and exposed how thin the line is between a "design failure" and a structural exit-by-mechanism.

Big Eyes Coin (2022 to 2023)

Big Eyes Coin raised over $40 million in presale across multiple stages, but the project repeatedly delayed launch, changed roadmaps, and was widely flagged as a soft rug by community analysts. It became a reference case for presale red flags: aggressive marketing budget, vague utility, anonymous team, and a roadmap that rewrote itself every quarter.

The 2024 to 2026 Memecoin Era: New Rug Pull Patterns

The current memecoin cycle created new categories of risk that did not exist in the 2021 era. Solana's Pump.fun made it possible to launch a token in under 60 seconds for less than $2, which spawned an industrial-scale rug pull industry. Base contributed deployer recycling, where the same developer wallets ship dozens of fresh tokens per day, each lasting hours. And political memecoins introduced a celebrity-driven rug pattern that caught even sophisticated traders.

Pump.fun and the Solana Memecoin Conveyor Belt

Pump.fun's bonding-curve launchpad processes tens of thousands of new tokens per day. The platform itself is neutral, but the velocity of launches means most tokens are abandoned within hours. The rug pattern is predictable: dev mints, snipes their own launch with insider wallets, pumps via Telegram raids, and dumps at the first liquidity peak. Tokens that never reach the bonding-curve threshold to graduate to Raydium typically lose 95% to 100% of buyer capital.

MOTHER (Iggy Azalea, 2024)

The MOTHER token, launched by rapper Iggy Azalea on Solana, became one of the highest-profile celebrity memecoins. While not a classic rug, the price collapse pattern and insider concentration produced significant retail losses and reinforced a general lesson: celebrity-backed tokens carry insider distribution risk even when there is no overt exit-scam.

LIBRA Controversy (February 2025)

LIBRA, a Solana memecoin briefly promoted by Argentine president Javier Milei on social media in February 2025, surged to a multi-billion-dollar market cap within hours, then collapsed by over 90% as insider wallets that had received a large allocation dumped into the rally. The episode triggered a political scandal and led to lawsuits, but for ordinary buyers it was a textbook concentrated-supply rug: a tiny number of wallets controlled the float, and they exited the moment retail bid arrived.

The Pattern That Connects Them All

Every modern memecoin rug shares the same structural fingerprint: thin float, concentrated insider supply, paid social amplification, and no economic reason for the price to sustain itself. Once you train your eye on this pattern, the specific ticker stops mattering. You will see it on Solana today, on Base tomorrow, on whatever chain hosts the next launchpad after that.

The 10-Point Red Flag Checklist (With Tools for Each Check)

This is the core of the article. Memorize this list. Run it on every token before you size into a position. If a token fails three or more checks, walk away. If it fails one of the critical checks (liquidity not locked, dev holds majority of supply, contract has mint function on EVM, or mint authority active on Solana), do not buy regardless of how strong the narrative looks.

A token does not need to fail every check to be dangerous. Failing two or three of the critical ones (1, 2, 5, and 10) is enough to put it in the "do not touch" category. Conversely, a token that passes all ten checks is still not guaranteed safe; it is just less obviously dangerous than the alternatives.

Solana Rug Pull Tools: The Complete Stack

Solana's risk model is dominated by mint authority, freeze authority, holder concentration, and the speed of memecoin launches. The tools below cover those vectors and let you screen most tokens in under three minutes.

A practical Solana flow looks like: paste the token address into RugCheck.xyz first, eliminate anything red. Then check Bubblemaps for cluster concentration. Then look at DEXTools for live volume and holder action. If all three look healthy, proceed to position sizing with a small probe.

Ethereum and Base Rug Pull Tools: The Complete Stack

EVM screening adds a layer of complexity because the contract itself can hide a lot of behavior. The tools below let you read what the contract actually does, not what the marketing site says it does.

A practical EVM flow looks like: paste the token contract into TokenSniffer, GoPlus, and De.Fi Scanner in three browser tabs. Cross-check any disagreement (one tool may flag, others may not). Then open Etherscan or Basescan, click Contract, then Read Contract, and verify owner address, paused state, and tax variables manually. Then check Bubblemaps for cluster concentration. Total time: under five minutes for a token you actually care about.

Solana vs EVM: The Differences That Matter

The high-level goal of a rug pull is identical across chains, but the levers a scammer pulls are different. Understanding these differences stops you from using an EVM mental model on a Solana token (or vice versa) and missing the obvious red flag.

The single most common Solana mistake is assuming "low fees means I can always exit". You cannot exit a position that has no buyer or whose contract no longer permits a sell. The most common EVM mistake is assuming a verified contract is a safe contract. Verification proves only that the displayed code matches the deployed bytecode; it says nothing about whether that code is honest.

The Step-by-Step Screening Workflow

Combine the checklist and the tools into a five-minute routine. This is the procedure to run before every meaningful position.

Comparison: Manual Screening vs Aggregator Tools vs Telegram Bots

You can run the workflow above in several different ways depending on speed requirements and trust preferences. None of the approaches is strictly best; they have different tradeoffs.

The realistic mix for most traders is: manual screening for any position above a meaningful size, aggregator dashboards for day-to-day monitoring, and sniper bots only for accepted-risk micro-positions where you understand most will go to zero. Trusting a Twitter call without doing your own verification is the same as setting your capital on fire, except slower.

Risks Even Honest Tools Cannot Eliminate

Tooling reduces obvious-rug risk by maybe 80 to 90%. The remaining risk is structural, and you need to size for it. Here are the categories no scanner catches.

Slow rugs over months: A team can pass every launch-day check, run a project for six months, and then exit-distribute their allocation gradually. The only defense is continuous wallet tracking, not one-shot screening. Pair this article with structured backtesting and market-maker pattern recognition to spot distribution that scanners miss.

Insider snipes you cannot see: On Pump.fun and similar Solana launchpads, the dev often snipes their own launch with a separate wallet that looks like an early retail buyer. Cluster analysis helps but is not perfect. Assume on any sub-24-hour memecoin that 20% to 40% of "early buyers" are insiders.

Exploits in the protocols themselves: Even a clean token can lose value if the DEX, bridge, or lending protocol it depends on gets hacked. This is why basic crypto wallet security tips and using burner wallets for memecoins matter.

Approval phishing: Rugs are not the only way to lose funds. A malicious dApp can request an unlimited token approval that lets it drain your wallet later, even if the underlying token is honest. Always understand what you are signing, use Permit2 token permission safeguards, and run transaction simulation before approving anything.

Address poisoning: Some scams do not touch your token at all. They poison your address history with similar-looking wallets so you accidentally copy-paste a scam address from your own transaction history. The defense is documented in our guide on avoiding crypto address poisoning.

If You Already Got Rugged: Recovery Options (Honest Answer)

This is the section every rug victim hopes will offer a way back. The honest answer is that in most cases there is no recovery. Once funds are out of the LP and into the scammer's wallet, they are either bridged to another chain, swapped for a privacy coin, or sent to a mixer. Tracing is possible, prosecution is rare, and reimbursement is almost never funded.

That said, here is what is actually worth doing if you have been rugged.

The honest takeaway is that prevention is the only realistic strategy. Getting rugged once and treating it as expensive tuition is the rational response. Getting rugged twice is a process failure that this checklist is designed to prevent.

Best Practices: The Habits of Traders Who Do Not Get Rugged

For traders who want to extend their toolkit further, check out our broader guides on decentralized finance fundamentals, Uniswap V4 hooks (which introduce new contract-level risks worth screening), and the complete USDT stablecoin guide for understanding the safer end of the risk spectrum.

Frequently Asked Questions

Q Q Q What is the fastest way to check if a token is a rug pull?

On Solana, paste the contract into RugCheck.xyz for a 30-second risk report covering mint authority, freeze authority, LP burn status, and top holders. On Ethereum or Base, use TokenSniffer plus GoPlus together. Any red flag from either tool is a hard stop. This catches roughly 80% of obvious rugs in under a minute.

Q Q Q How much of the supply held by the dev is too much?

More than 5% in a single non-LP wallet is a yellow flag. More than 15% is red. More than 30% is fatal for any token without a clearly documented vesting schedule. Always run Bubblemaps because the dev often splits their allocation across multiple wallets that look distributed on a flat holder list but are actually a connected cluster.

Q Q Q Is a locked liquidity pool enough to prove a token is safe?

No. Locked liquidity prevents one specific scam (a one-shot liquidity pull) but does not prevent honeypot contracts, sell taxes that can be raised to 99%, dev mint dumps, blacklist functions, or slow rugs by gradual insider distribution. LP lock is necessary but not sufficient.

Q Q Q Are Solana rug pulls more common than Ethereum or Base rug pulls?

In absolute numbers, yes, because Solana's launch friction is much lower (Pump.fun-style launches cost less than $2 each). But the average Solana rug is also smaller and faster. Ethereum and Base see fewer rugs but each one tends to be more carefully constructed, often involving honeypot contracts or modifiable transfer taxes that scammers cannot easily implement on classic Solana SPL tokens.

Q Q Q What does it mean when mint authority is "active" on Solana?

An active mint authority means the dev can still create new supply of the token at any time. They can mint billions of fresh tokens, dump them into the LP, and crash the price to zero. Mint authority should be disabled (set to null) on any token you intend to hold for longer than a brief speculative trade. RugCheck.xyz and SOLsniffer both display this status prominently.

Q Q Q Can I trust a token just because it has a CertiK audit?

An audit reduces the probability of an undiscovered contract vulnerability but does not guarantee the token is not a rug. An audited contract can still have owner-renounced-false, an active mint function, concentrated insider holders, or an unrelated economic flaw. Always read the actual audit report and confirm it was published on the auditor's official domain (not just a PDF the project hosts itself).

Q Q Q What is a honeypot token?

A honeypot is a token whose contract logic permits buys but blocks sells (or applies an extreme sell tax). The chart only goes up because no one can exit, which creates the illusion of constant demand. When the scammer eventually drains the pool, all retail buyers are trapped. TokenSniffer and GoPlus both run automated honeypot simulations to flag this pattern.

Q Q Q What was the LIBRA scandal?

LIBRA was a Solana memecoin that surged to a multi-billion-dollar market cap in February 2025 after being briefly promoted on social media by the Argentine president. Insider wallets controlling a large share of the float dumped into the retail rally, collapsing the price by over 90% in hours. It triggered a major political scandal and reinforced the lesson that celebrity or political endorsement does not eliminate concentrated-supply risk.

Q Q Q Can I get my money back after a rug pull?

In most cases, no. Funds drained from a rug pull are typically bridged or mixed within hours, and successful prosecutions are rare. The best you can usually do is document the loss for tax purposes, report the scam wallet to chain-analytics firms (Chainalysis, Elliptic, TRM Labs) so they can flag the address at compliant off-ramps, and report to the FBI's IC3 or your national cybercrime unit. Ignore any DM offering "recovery services", they are themselves scams.

Q Q Q What is the difference between a hard rug and a soft rug?

A hard rug is an instant exit where the dev drains the liquidity pool or triggers a contract function that lets them extract value in a single transaction. A soft rug is gradual abandonment: the team stops developing, stops marketing, and lets the token drift toward zero from neglect, often distributing their allocation slowly along the way. Soft rugs are harder to detect because there is no single dramatic event.

Q Q Q Does renounced ownership guarantee an EVM token is safe?

Renounced ownership removes the dev's ability to call owner-only functions, which closes off many exit paths, but it does not address concentrated holder distribution, slow-rug distribution by the dev's own wallet, honeypot logic that was baked in before renouncing, or proxy contracts that route around the ownership check. Always treat "ownership renounced" as one positive signal among ten, not as a green light by itself.

Q Q Q How do I check liquidity lock status on Base?

Open the project's DEXTools or DEX Screener page, find the LP token address, and search for it on Team.finance, Unicrypt (UNCX), or PinkLock. Each platform shows lock duration, percentage locked, and the unlocker address. Less than 80% of LP locked is a yellow flag. Less than 50% locked, or any unlock date within 90 days, is a hard stop on a low-cap token.

Final Takeaway

Rug pulls are not unstoppable. They are mostly preventable failures of process. The traders who keep getting caught are the ones who treat each token as a fresh emotional decision instead of running the same checklist every time. The traders who survive memecoin season have a five-minute routine they execute without exception: verify the contract address, scan with RugCheck or TokenSniffer plus GoPlus, check holder clusters on Bubblemaps, confirm the LP is locked or burned, read the contract for dangerous functions, look at the volume quality, sanity-check the social, and size like the trade might be wrong.

If you do that consistently across Solana, Ethereum, and Base, you will avoid the overwhelming majority of obvious rugs. You will still take losses on honest projects that fail. You will still occasionally get caught by an unusually sophisticated scam. But you will stop losing to the same five patterns that have rugged the same demographic of retail buyer every cycle since 2020.

Disclaimer: This content is for informational purposes only and does not constitute financial advice. Crypto investments carry significant risk, including the total loss of capital. Always do your own research and never invest more than you can afford to lose.

Related Guides

• How to Avoid Rug Pulls on Solana: Red Flags Every Trader Should Know
• Rug Pull Checklist: 10 Pair Explorer Checks to Avoid Scams
• Spot Rug Pulls Fast: Use DEXTools in 3 Minutes
• L1 and L2 Ecosystems 2026: Solana, BNB, Ethereum, and Base.
• DEX Volume Race 2026: Solana, Ethereum, BNB, and Base