A crypto rug pull is a scam in which developers or insiders attract investors to a token and then take the value out. Victims can lose most or all of their money, sometimes within minutes.
Rug pulls are most common among new tokens, decentralized finance (DeFi) projects and meme coins. Creating a token costs very little, and social media gives scammers access to a very large audience.
Measuring the problem is hard. Researchers use different definitions, and a token that fails is not always a fraud.
This article reviews the best available data from Chainalysis and Solidus Labs. It also covers real court cases and the warning signs investors can check. Figures are reported as the researchers gave them. Updated 29 October 2026.
Key Rug Pull Statistics at a Glance
The table below collects the main figures used in this article. Each one comes from a named source.
Statistic
Figure
Source
Tokens launched during 2024
2,063,519
Chainalysis
Tokens listed on decentralized exchanges
873,957
Chainalysis
Tokens meeting suspected pump-and-dump criteria
74,037
Chainalysis
Share of launched tokens flagged
3.59%
Chainalysis
Suspicious DEX pools apparently rugged by their creators
About 94%
Chainalysis
Pump.fun tokens under $1,000 in liquidity
98.6%
Solidus Labs
Estimated crypto scam and fraud proceeds in 2025
About $17 billion
Chainalysis
SafeMoon CEO prison sentence
100 months
US Department of Justice
Figure 1: Of about 2.06 million tokens launched in 2024, 74,037 met Chainalysis’s suspected pump-and-dump criteria.
The $17 billion figure covers many types of fraud, not only rug pulls. The other figures are narrower and focus on token launches.
None of these numbers is a count of proven criminal rug pulls. They show suspicious activity found through blockchain analysis, or tokens that lost nearly all of their liquidity.
Even so, they show how many tokens appear and how few hold their value. The next sections explain each study in more detail.
Rug pull data is also hard to compare across studies. Some researchers examine harmful smart contracts, while others track liquidity withdrawals or odd trading patterns. A reader should always check which method sits behind a number.
Chainalysis Data: 74,037 Suspicious Tokens
Chainalysis studied tokens launched in 2024 for its 2025 Crypto Crime Report. It counted 2,063,519 new tokens. Of those, 873,957 were listed on decentralized exchanges, often called DEXs.
The firm then applied transaction and liquidity rules to find possible market manipulation. A total of 74,037 tokens met its suspected pump-and-dump criteria.
That equals 3.59% of all launched tokens. Measured against only the tokens that reached a DEX, the share is about 8.5%. That second figure is our own calculation from the numbers above.
Figure 2: Chainalysis found that about 94% of suspicious DEX pools were apparently rugged by their creators.
Chainalysis also looked at the liquidity pools tied to the suspicious tokens. It found that approximately 94% of them were apparently rugged by their creators.
How Fast Do These Schemes Collapse?
Chainalysis found that many suspected schemes were abandoned within days. A large share collapsed on the same day they appeared.
That speed leaves little time to react. By the time a warning spreads on social media, the liquidity may already be gone.
What the Figures Do Not Show
Chainalysis used set criteria to flag tokens. A flag points to suspicious patterns. It is not a court finding.
Some flagged tokens may have failed for other reasons, and some scams may have passed through the filters unnoticed. The numbers are best read as a guide to scale, not an exact count.
Solidus Labs Data: Pump.fun Tokens and Low Liquidity
Solidus Labs published research in May 2025 on tokens launched through Pump.fun. The company looked at more than seven million tokens that had recorded at least five trades.
It then removed tokens that moved on to Raydium, a Solana exchange. Of the rest, about 98.6% had fallen below $1,000 in liquidity.
Figure 3: Solidus Labs found that 98.6% of the examined Pump.fun tokens had less than $1,000 in liquidity.
At that level, trading in any real size is very hard. A holder who wants to sell may find few buyers, or none.
Solidus did not say that all of these tokens were stolen. Many simply failed to find steady demand.
Comparing the Two Studies
Researcher
What was measured
Result
Main limit
Chainalysis
Suspected pump-and-dump tokens among 2024 launches
74,037 tokens (3.59%)
Based on set criteria, not court findings
Solidus Labs
Pump.fun tokens under $1,000 in liquidity
98.6%
Shows illiquid tokens, not proven fraud
The two studies use different methods and cover different platforms. Their numbers should not be added together or compared directly.
Still, both point the same way. New, low-cost tokens often lose nearly all of their trading value.
The Wider Scam Picture
Chainalysis estimated that crypto scams and fraud produced about $17 billion in illicit proceeds during 2025. That figure includes many scam types beyond rug pulls.
It is useful as context for the size of the problem. It should not be read as the total lost to rug pulls.
How a Rug Pull Works and the Main Types
Most rug pulls follow five steps. Scammers create a token, build interest, collect money, take it out and abandon the project.
Token creation is cheap. It takes far less work than building a new blockchain. Some projects use automated launch platforms on chains such as Ethereum, Solana or BNB Smart Chain.
Figure 4: A typical rug pull follows five steps, and the last two can happen very quickly.
Promotion often includes influencer posts, giveaways and promises of large returns. Fake trading can make it look as if real demand exists.
Once enough money comes in, insiders may remove liquidity, sell large holdings, change transaction rules or take funds set aside for development. Websites then stop working and social accounts go quiet.
Six Common Types of Rug Pull
Type
How it works
Main warning sign
Liquidity rug pull
Developers remove the assets that support token trading
Unlocked or developer-controlled liquidity
Token dumping
Insiders sell large amounts of tokens
Concentrated token ownership
Honeypot
Malicious code stops ordinary investors from selling
Suspicious restrictions in the smart contract
Minting exploit
Developers create new tokens and sell them
Unrestricted token creation permissions
Slow rug pull
Insiders take value out gradually
Repeated insider selling
Project exit scam
Developers misuse funds and abandon promised services
Opaque finances and misleading claims
Liquidity rug pulls are among the easiest to recognize. DEXs often use pools that hold two assets, such as a new token and Ethereum. Uniswap warns that developers who control unlocked liquidity can remove it whenever they choose.
A honeypot lets people buy a token but not sell it. Some contracts exempt privileged wallets, while others charge extreme selling fees. Uniswap warns that some malicious tokens apply a 100% selling fee.
A slow rug pull is harder to spot because the token stays tradable. Insider selling alone is not proof of fraud, since honest teams may sell vested tokens under disclosed plans. The surrounding facts matter.
Rug Pull vs Pump-and-Dump
Feature
Rug pull
Pump-and-dump
Main method
Insiders extract value or abuse control
Participants inflate a price, then sell
Liquidity removal
Common
Not necessarily
Malicious contract
Possible
Not required
Developer role
Usually central
Not always needed
Can they overlap?
Yes
Yes
A pump-and-dump can involve traders who control nothing about the underlying project. A rug pull involves insiders who abuse control over tokens, liquidity or funds. Some schemes combine both.
Real Cases: SafeMoon and LIBRA
SafeMoon
SafeMoon launched in March 2021 and drew strong investor interest. Its creators said that substantial liquidity was locked and could not be withdrawn.
US authorities later alleged that insiders kept access to the funds and took investor assets. In May 2025, a federal jury convicted SafeMoon chief executive Braden John Karony of conspiracy to commit securities fraud, wire fraud and money laundering.
Figure 5: SafeMoon launched in March 2021, and its CEO was sentenced to 100 months in February 2026.
On 10 February 2026, Karony was sentenced to 100 months in prison. He was also ordered to forfeit about $7.5 million.
The Department of Justice said he and his co-conspirators deceived investors about liquidity limits and used diverted assets for personal gain. The case shows why claims about locked liquidity should be checked independently.
LIBRA
The LIBRA meme coin was promoted by Argentine President Javier Milei in February 2025. Its price rose quickly and then collapsed. The launch drew allegations of insider activity.
Allegations are not the same as proven crimes. On 23 October 2026, Reuters reported that an Argentine federal judge dismissed a criminal investigation involving Milei, his sister and businessman Hayden Davis, citing insufficient evidence of fraud.
Case
Claim or allegation
Latest outcome
SafeMoon
Misleading liquidity claims and misuse of investor assets
CEO sentenced to 100 months in February 2026
LIBRA
Insider activity and possible rug-pull behavior
Argentine criminal investigation dismissed, per Reuters, October 2026
A sudden price drop and odd trading are reasons to investigate. They are not proof of a criminal rug pull.
The two cases point to the same lesson. Marketing claims, such as locked liquidity or strong backing, should be checked against blockchain records and court filings before anyone treats them as fact.
Warning Signs, Checks and Protection
Investors cannot spot every scam in advance. Still, several signs suggest a project needs a closer look.
Ten Warning Signs
Liquidity is not locked. Developers who control liquidity can withdraw it. A screenshot of a lock proves nothing, so check blockchain records.
A few wallets hold most tokens. If five wallets hold 80 million of 100 million tokens, they can create heavy selling pressure. Some large wallets belong to exchanges or vesting contracts, so check who owns them.
The contract has risky permissions. Examples include unlimited minting, blocking some addresses from selling, raising taxes sharply or freezing transfers.
The team cannot be verified. Anonymous teams are common in crypto, and Bitcoin’s creator is still unknown. Invented resumes and fake partnerships are a bigger concern.
The project promises guaranteed returns. No token can guarantee profit. The US Federal Trade Commission warns that promises of fast gains with little risk are a sign of fraud.
There is no real development. A polished website is not proof. Look for working products, technical papers and public code, though code can be copied.
Promotion is heavy. Coordinated posts, price predictions and paid influencers can hide financial motives. Followers can be bought.
Trading looks fake. High volume with few real holders may point to wash trading, where related wallets trade back and forth. Chainalysis lists it as a tool in some pump-and-dump schemes.
Audit claims lack proof. Fake audit certificates exist. Check the report on the audit firm’s own website, and remember that a real audit does not guarantee safety.
You are pushed to buy now. Claims of closing presales or coming exchange listings are meant to stop research.
Checks to Run Before Buying
Start with the correct contract address from a verified source, not a link in a promotional post. For Ethereum tokens, Etherscan shows transactions, holders and verified code. Etherscan warns that a verified contract is not necessarily safe or audited.
DEX Screener shows trading volume, liquidity, token age and recent trades. Compare market capitalization with the liquidity actually available. Market cap is not cash that holders can withdraw.
Figure 6: In this hypothetical example, a token with a $20 million market cap has only $30,000 in liquidity.
Security scanners such as Token Sniffer and GoPlus can flag risky permissions, odd taxes or selling limits. They can also give false alarms and miss clever scams. A clean result is not proof of safety.
Finally, review the top holders. Look for connected wallets, large allocations without vesting and insider transfers to exchanges. These moves do not prove wrongdoing, but they can signal selling pressure.
Can Lost Money Be Recovered?
Recovery is hard. Most blockchain transactions cannot be reversed, so victims cannot cancel a transfer to a scammer.
Law enforcement can sometimes trace and seize funds, especially if they reach a regulated exchange. Victims should keep transaction hashes, wallet addresses and messages. In the US, reports can be filed with the FBI Internet Crime Complaint Center . The FBI warns that recovery companies that ask for more payments may be scams too.
Are Rug Pulls Illegal?
Fraudulent rug pulls can break criminal, securities and other financial laws. The rules depend on the country and the conduct involved.
US authorities have prosecuted crypto developers for fraud and money laundering, as the SafeMoon case shows. In Europe, the Markets in Crypto-Assets Regulation sets rules for some crypto activity. EU authorities still warn that consumer protection is limited for certain assets and services.
Ways to Reduce Risk
Never invest money needed for essential expenses. New speculative tokens can lose their entire value, however good the marketing looks.
When trying unfamiliar apps, consider a separate wallet that holds only a small amount. MetaMask also recommends reviewing and revoking token allowances that are no longer needed. Revoking does not bring back money that is already lost.
Common Questions About Rug Pulls
Does locked liquidity mean a token is safe? No. A lock can reduce one risk, but it does not stop insider selling, harmful contract functions or other forms of fraud.
Can a rug pull happen in minutes? Yes. Some tokens collapse soon after launch when developers pull liquidity or sell large holdings.
Can you sell after a rug pull? Sometimes. Liquidity may be so thin that a sale brings very little money. Honeypot tokens may block sales completely.
Can Bitcoin be rug pulled? Bitcoin has no central team that controls a liquidity pool the way many new tokens do. Bitcoin holders can still face exchange fraud, market manipulation and other scams.
Are all new meme coins scams? No. Some build active communities and keep working markets. Even so, new meme coins carry real risks tied to liquidity, concentrated ownership and fast speculation.
Do audits prevent rug pulls? No. An audit can find certain technical flaws. It cannot promise honest behavior from developers.
Are meme coins more exposed than other tokens? Their prices often depend on hype and social media attention. Many have little function, thin liquidity and concentrated ownership. Projects with serious technical claims can still commit fraud, so the key question is whether the way a token works, and who controls it, can be verified.
Bottom Line
A rug pull happens when insiders use their control over a project to take money from investors. The token is often left nearly worthless.
Chainalysis flagged 74,037 of the 2,063,519 tokens launched in 2024, which is 3.59%. Solidus Labs found that 98.6% of the Pump.fun tokens it examined had fallen below $1,000 in liquidity. Neither figure proves fraud on its own, but both show the risk of new tokens.
The SafeMoon case shows that a project can mislead investors about basic safeguards. The LIBRA case shows that a collapse and a proven crime are different things.
Many warning signs can be checked before buying. Check liquidity, token ownership, contract permissions and audit claims. Even careful research cannot remove every risk.
Sources
Chainalysis (January 2026): 2026 Crypto Crime Report: Cryptocurrency Scams and Fraud
Chainalysis (2025): Crypto Market Manipulation: Wash Trading and Pump-and-Dump Schemes
Solidus Labs (May 2025): Solana Rug Pulls and Pump-and-Dumps Report
US Department of Justice (February 2026): SafeMoon CEO Sentenced to 100 Months for Cryptocurrency Fraud
US Securities and Exchange Commission: SEC Charges SafeMoon and Executives With Fraud
Reuters (October 2026): Argentine Judge Dismisses Investigation Into LIBRA Meme Coin Scandal
Uniswap Labs: Risks of Providing Liquidity
Uniswap Labs: Understanding Unsellable Tokens and Honeypots
Etherscan: Understanding Token Information and Holder Distribution
Etherscan: How to Verify Smart Contracts
MetaMask: How to Revoke Smart Contract Allowances
Federal Trade Commission: How to Identify Investment Scams on Social Media
FBI: Cryptocurrency Investment Fraud Guidance
European Securities and Markets Authority (October 2025): European Regulators Warn About Cryptocurrency Risks
Financial Conduct Authority (February 2026): Cryptocurrency Investment Scams
Disclaimer: This article is for educational purposes only and does not constitute financial, investment or legal advice. Crypto investments carry high risk, including the loss of all capital. Security tools and research cannot guarantee protection against fraud.
The post Crypto Rug Pull Statistics: How Common Are They in 2026? appeared first on Blockonomi .
