Project
Trust
Tools
Insights How to buy FAQ Join community
Insights · Safety

How to Spot a Rug Pull
and Red Flags to Avoid

Every week, new Solana tokens appear and disappear overnight. This guide explains what a rug pull actually is, what warning signs look like on-chain, and what transparency looks like when a project is building in good faith.

June 2026 · 7 min read · ← Back to Insights
The Basics

What Is a Rug Pull?

A rug pull is a type of crypto exit scam in which project insiders — developers, early team members, or liquidity providers — withdraw funds or dump tokens on unsuspecting holders, leaving them with tokens worth nothing. The "rug" is pulled out from under you.

Liquidity Rug

The most common form. Developers seed a trading pool, hype the token, then withdraw all liquidity — the price collapses to zero instantly and holders cannot sell.

Team Token Dump

A team holds a large, undisclosed share of supply. After launch hype drives price up, they sell their allocation en masse. Slow-motion rug — harder to see coming.

Mint Authority Exploit

If the team retains mint authority, they can print unlimited new tokens at any time, diluting every holder to near-zero with a single transaction. Revocation is the only real fix.

Warning Signs

Red Flags That Should Make You Stop

These are not hypothetical. Each of these patterns has appeared in documented rug pulls on Solana and other chains. None alone is definitive proof — but several together should end your interest immediately.

Anonymous Team + Big Promises

Anonymity alone is not a red flag — some legitimate projects operate pseudonymously. The red flag is anonymity combined with grand, unverifiable claims: "partnered with banks", "regulatory approval secured", "listing on major exchange confirmed". If you cannot verify the claim on-chain or via a public announcement from the named party, treat it as fiction.

Mint Authority Not Revoked

Check the token's mint account on Solscan. If "Mint Authority" shows any address other than null or disabled, the team can create unlimited new tokens at any time. This is one of the clearest on-chain danger signals. See our token verification guide for step-by-step instructions.

Concentrated or Hidden Liquidity

Before a token has a trading pool, ask: will liquidity be locked, and for how long? After launch, check pool data — if one wallet controls most of the liquidity, that wallet can drain it at any moment. Healthy projects publish their liquidity plan before launch, not after questions arise.

Guaranteed Returns or Price Targets

No token team can guarantee future price performance. "100x guaranteed", "minimum 50x by Q3", "price can only go up" — these are either lies or the statements of people who do not understand how markets work. Neither is a good sign. Legitimate projects describe what they are building, not what your investment will return.

DM Presales and Private "Whitelists"

This is one of the most common pre-launch scam vectors. Someone contacts you via Telegram or X claiming early access to a token sale. You send funds — and you never hear from them again. Legitimate projects announce sales through their official channels only. TrustTails will never DM you asking for funds. If someone claims to represent TrustTails and asks for payment, it is a scam.

Artificial Urgency

"Sale ends in 2 hours." "Only 500 spots left." "Buy now or miss it forever." Urgency is a psychological tool designed to prevent you from doing research. Good projects want you to take time, read the whitepaper, check the on-chain data, and ask questions. If a team is discouraging due diligence, that is your answer.

What Good Looks Like

Green Flags vs Red Flags

Not every project is a scam, and not every green flag means a project will succeed. But these signals help separate teams building honestly from teams building exits.

Green Flags

  • Mint authority revoked (verifiable on-chain, shows null)
  • Freeze authority revoked (no wallet can freeze your tokens)
  • Fixed total supply publicly stated and verifiable
  • Liquidity lock details published before or at launch
  • All communications via public, verifiable official channels
  • Honest roadmap with exploratory phases clearly labelled as unconfirmed
  • No price predictions or return guarantees in any materials
  • Explicit scam warnings issued through official channels

Red Flags

  • Mint authority active — team can print more tokens at will
  • Freeze authority active — team can freeze your wallet
  • Supply is unverified or changes after launch
  • Liquidity is unlocked or controlled by one wallet
  • DMs offering presale access or "exclusive" allocations
  • Unverifiable partnership or listing claims
  • Price guarantees or "100x" language anywhere
  • Copy-paste whitepaper with no original thinking
Do the Work

On-Chain Checks: What to Look Up Before You Buy

For any Solana token, these checks take under five minutes and can save you from a total loss. Open Solscan and search the contract address. Here is what to look for.

1. Mint Authority Status

On the token's Solscan page, check "Mint Authority". It should read disabled or show a null address. If it shows any wallet address, that wallet can mint more tokens. This is non-negotiable for a trustworthy token.

2. Freeze Authority Status

Also on the token page: check "Freeze Authority". It should be disabled. An active freeze authority means the team can lock your tokens in your own wallet — preventing you from selling or transferring them.

3. Top Holder Distribution

Check the "Holders" tab. If the top 10 wallets hold 60%+ of supply and are clearly not exchange or liquidity wallets, that concentration is a risk. A single sell from a whale can crater the price — and if they are the team, it may never recover.

4. Liquidity Pool Ownership

After a token launches on a DEX like Raydium, check who owns the LP tokens. Burned LP tokens (sent to a null address) mean the liquidity cannot be withdrawn. Unlocked LP in a team wallet is a direct path to a liquidity rug.

5. Transaction History Quality

Look at early transactions. Do they come from hundreds of organic wallets, or are many transactions between a small cluster of the same addresses? Wash trading (circulating tokens between connected wallets) inflates apparent volume and creates false social proof.

6. Contract Address Match

Always copy the contract address directly from the project's official website — not from a Telegram message, X reply, or DM. Scammers create near-identical fake tokens with similar names. If the address on-chain does not exactly match what the official website states, stop immediately.

For a full walkthrough of how to verify a Solana token on Solscan, read our dedicated guide: How to Verify a Solana Token on Solscan →

Where TrustTails Stands

How TrustTails Addresses These Concerns

We will not ask you to trust us on principle. You should verify everything below directly on-chain. Here is what is verifiable — and what is not yet settled — as of launch.

Mint Authority: Revoked

No new TAIL tokens can ever be created. The total supply is fixed at exactly 1,000,000,000 TAIL. Verify this yourself on Solscan.

Freeze Authority: Revoked

No wallet — including ours — can freeze your TAIL tokens. Once you hold them, you control them. Again, verifiable on-chain at any time.

Liquidity Plans

TrustTails is pre-launch. No Raydium pool exists yet. Liquidity structure will be published transparently before the pool opens. Watch the official announcements channel for details.

What we will not claim

TrustTails started as a meme to get noticed. Everything after that has to be earned, not claimed. That means we will not tell you this is a safe investment, that price will rise, or that any partnership or exchange listing is confirmed — because none of those things are confirmed. The finance-sector relevance we aspire to long-term is an unconfirmed direction, not a current reality.

Crypto carries real risk, including the total loss of your funds. Read the whitepaper, check the legitimacy page, and make your own decision. We would rather have 1,000 holders who genuinely understand what TrustTails is than 100,000 who were misled into buying.

Contract / Mint Address
4NoNV3jSYLRbUtVWSTK5XdkpuvRzGpMCmfZSBKMuk6Rc
Verify on Solscan →
Common Questions

Rug Pull FAQs

Can a rug pull still happen even if mint authority is revoked?
Yes — a revoked mint authority prevents new token creation, but a rug pull can still happen through liquidity removal (if the pool is unlocked) or coordinated team token dumps (if the team holds a large undisclosed share). Mint revocation is necessary but not sufficient. You should also check LP lock status and holder distribution. We cover all of this in our security page.
How do I know if TrustTails itself is legitimate?
We have dedicated an entire page to that question. Visit Is TrustTails legit? for a detailed breakdown of the on-chain verifiable facts, what we have claimed, what we have not claimed, and how to check everything independently. We also recommend reading the whitepaper before forming any opinion.
Someone DMed me offering early access to TAIL. Is that real?
No. TrustTails does not operate private presales or DM people with investment offers. Any message offering early allocation, whitelist spots, or preferential pricing via DM is a scam — report and block immediately. Our only official channels are @trusttailscoin on X, Telegram community, and Telegram announcements.
Is TrustTails listed anywhere I can buy it now?
No. TrustTails is currently pre-launch. There is no active Raydium pool, no DexScreener listing, and no way to purchase TAIL at this time. Any site or person claiming to sell TAIL right now is running a scam. A public announcement will go out through official channels when and if trading becomes available.
What does "freeze authority revoked" actually protect me from?
On Solana, freeze authority allows the token issuer to freeze a specific token account — which means you would be unable to transfer or sell your tokens from that account. With freeze authority revoked, this power no longer exists. No wallet, including the TrustTails team, can prevent you from transacting with your own TAIL tokens.
Are there audits or security certifications for TAIL?
We do not currently have a third-party smart contract audit to reference. The primary on-chain protections are the revoked mint and freeze authorities, which are verifiable by anyone on Solscan without needing to trust an audit firm. We will be transparent about any future security reviews if and when they occur. Visit our security page for current status.
Keep Reading

Related Guides

Is TrustTails Legit?

A direct, honest breakdown of what TrustTails is, what is verifiable on-chain right now, and what we are not claiming. No hype, no deflection.

Read more →
Stay Informed

Ask Questions. Verify Everything.

The TrustTails community is the right place to ask hard questions, share what you have found on-chain, and hold us accountable. We are not here to tell you to trust us blindly — we are here to earn it.

Nothing on this page is financial advice. Crypto investments carry significant risk, including total loss of value. Always do your own research and verify on-chain before making any decision.