What Is a Rug Pull on Solana?
A rug pull is a type of exit scam where a token creator or insider deliberately drains liquidity or dumps a massive supply of tokens on buyers, crashing the price to near zero. The term comes from the metaphor of pulling a rug out from under someone. On Solana, rug pulls are especially common in the memecoin space because of how fast and cheap it is to launch tokens through platforms like pump.fun.
Rug pulls on Solana generally fall into three categories. Hard rugs involve the creator removing all liquidity from the trading pool, making it impossible for holders to sell. Soft rugs happen when insiders gradually sell off their holdings over time, slowly draining value while maintaining the appearance of a live project. Technical rugs exploit token program features like mint authority or freeze authority to manipulate supply or lock holders out of their tokens entirely.
Understanding these patterns is critical for anyone trading memecoins. The vast majority of tokens launched on pump.fun every day are either outright scams or low-effort projects that will trend toward zero. Your job as a trader is to identify the red flags before you commit capital. This guide gives you the exact checklist to follow.
Critical Red Flags to Watch For
These are the on-chain indicators that signal a token may be a rug pull. Each flag alone is worth investigating; multiple flags together should be treated as a strong warning to stay away.
Mint Authority Still Enabled
If the token creator retains mint authority, they can create unlimited new tokens at any time, inflating supply and crashing your holdings to zero. On legitimate tokens, mint authority is revoked after launch. Always verify this on Solscan's token page under the "Authorities" section.
CriticalFreeze Authority Active
Freeze authority allows the token creator to freeze any wallet's token account, preventing them from selling. This is the most direct form of a honeypot. The creator lets people buy, then freezes all accounts and sells their own supply. Check for this on the Solscan token metadata page.
CriticalLiquidity Not Burned or Locked
If the LP tokens are still held by the creator, they can pull all liquidity at any moment, leaving holders with tokens that cannot be sold. On pump.fun tokens that have graduated to PumpSwap or Raydium, check whether the LP tokens have been burned to a dead address or locked in a time-lock contract.
CriticalConcentrated Token Holdings
When a small number of wallets hold a disproportionately large percentage of the total supply (beyond the bonding curve or LP), it indicates insider accumulation. If three to five wallets control over 20 to 30 percent of supply, a coordinated dump is likely. Use BirdEye or Bubblemaps to visualize holder distribution.
High RiskSame-Block Bundled Buys
Scammers often use Jito bundles or custom programs to execute multiple buys in the same block as token creation. This lets them accumulate a large position before anyone else can react. On Solscan, check the first few transactions after token creation. If you see multiple buys from different wallets all in block zero or block one, those wallets are likely controlled by the same entity.
High RiskNo Social Presence or Copied Branding
Legitimate projects have a social trail. Check if the Twitter account was created recently, has purchased followers, or is impersonating another project. Verify the Telegram group has real conversations. Scammers frequently copy the name and logo of trending tokens and launch impersonator versions.
High RiskMultiple Red Flags = Walk Away
Any single red flag deserves investigation. Two or more red flags on the same token is a strong signal to avoid it entirely. No amount of hype, influencer endorsement, or chart action justifies ignoring on-chain safety indicators. The one time you skip due diligence is the time you get rugged.
Tools for Verifying Token Safety
These are the primary tools that Solana memecoin traders use to verify whether a token is safe to trade. Each serves a different purpose, and using them together gives you the most complete picture.
RugCheck.xyz
The most popular automated rug pull scanner on Solana. Paste any token mint address and RugCheck analyzes mint authority, freeze authority, LP status, top holder concentration, and metadata. It assigns a risk score and flags specific issues. This should be your first stop before buying any memecoin.
rugcheck.xyzBirdEye Holder Analysis
BirdEye provides detailed holder distribution charts showing how many wallets hold the token and what percentage of supply each controls. Look for a healthy distribution curve where no single non-LP wallet holds more than 3 to 5 percent of supply. Concentrated holdings are a major warning sign.
birdeye.soSolscan Token Page
Solscan lets you inspect every detail of a token's on-chain state. Check the Authorities tab for mint and freeze authority status. Review the Holders tab for distribution. Examine early transactions to identify bundled buys. Solscan is the raw data source that other tools build on.
solscan.ioBubblemaps.io
Bubblemaps creates visual cluster maps of token holders, showing connections between wallets. It reveals when multiple "independent" wallets are actually controlled by the same entity through shared funding sources or coordinated transaction patterns. Invaluable for detecting insider wallet networks.
bubblemaps.ioPre-Buy Safety Checklist
Run through this checklist before buying any Solana memecoin. It takes less than two minutes and can save you from losing your entire position to a rug pull. Each step is designed to catch a different type of scam.
Run RugCheck on the Token Mint
Copy the token's mint address and paste it into RugCheck.xyz. Review the automated risk score. If it flags mint authority, freeze authority, or low liquidity, stop here. Do not proceed until you understand each flagged issue.
Check Authority Status on Solscan
Navigate to the token page on Solscan. Click the Authorities or Metadata tab. Confirm that both mint authority and freeze authority show as revoked or null. If either is still active, the creator can rug you at any time.
Analyze Top Holder Distribution
On BirdEye or Solscan, review the top 20 holders. Exclude the bonding curve address and any LP pool address. If any remaining wallet holds more than 5 percent of supply, investigate that wallet. Multiple wallets holding 3 to 5 percent each funded from the same source is a red flag.
Inspect First Transactions for Bundled Buys
On Solscan, sort the token's transactions by oldest first. Look at the first 10 to 20 transactions. If multiple wallets bought in the same block or within seconds of token creation, those are likely insider wallets using Jito bundles. Note their addresses and check their current holdings.
Verify Liquidity Lock or Burn
For tokens that have graduated from pump.fun's bonding curve to PumpSwap or Raydium, check whether LP tokens have been burned. On pump.fun's bonding curve, liquidity is managed by the program itself. After graduation, LP token ownership becomes critical. Unburned LP tokens held by a single wallet are a rug risk.
Map Wallet Connections with Bubblemaps
Paste the token address into Bubblemaps and look for wallet clusters. Legitimate projects show a dispersed holder map. Scam tokens often show tight clusters of wallets all funded from the same parent wallet or connected through a chain of small transfers designed to obscure the connection.
Check Social Proof and Project Legitimacy
Verify the project's Twitter, Telegram, and website. Is the Twitter account older than 30 days? Does the Telegram group have real conversations or just bot spam? Is the website a copy-paste template? Compare the branding against existing projects to check for impersonation. Real communities take time to build.
Legitimate Volume vs Scam Volume Patterns
One of the most important distinctions in memecoin trading is understanding the difference between legitimate volume generation and scam volume patterns. Both involve multiple wallets trading a token, but the on-chain signatures are fundamentally different.
Scam Volume: Single-Wallet Loops
Scammers often generate fake volume using a single wallet or a small cluster of wallets that buy and sell to each other in a tight loop. On-chain, this looks like the same two or three addresses repeatedly trading back and forth with identical amounts at predictable intervals. Anyone checking Solscan or BirdEye can see the pattern within seconds. The wallet addresses are often funded from the same parent, and the trade sizes are suspiciously uniform.
Legitimate Volume: Multi-Wallet Architecture
Tools like Vol Bot use a fundamentally different approach. Each worker wallet is a unique, independently generated Solana keypair. Trade sizes are randomized within configurable ranges. Timing is varied using strategy-specific algorithms. The result is on-chain activity that mirrors what real community trading looks like: dozens of unique addresses, varied trade amounts, and irregular timing. There are no loops between two wallets, no uniform trade sizes, and no predictable patterns.
Vol Bot's Approach to Naturally Varied Volume
Vol Bot generates unique keypairs for every worker wallet and supports three distinct trading strategies (micro-trade, wave, and random walk) specifically designed to produce varied on-chain patterns. This is fundamentally different from scammer single-wallet loops. Learn more about the boss/worker wallet architecture and how it works.
What Savvy Traders Look For
Experienced memecoin traders have learned to distinguish between real and fake volume. They check maker count on DexScreener, which is the number of unique wallets that have executed at least one trade. They look at the ratio of unique makers to total transactions. They verify that trading wallets have other activity and are not freshly created single-purpose addresses. When evaluating any token, use the same lens. High volume from few wallets is suspect. High volume from many independent wallets suggests broader interest.
For a deeper dive into how volume generation works and the strategies behind it, read our complete pump.fun volume guide. If you want to understand how fees factor into trading cost, check out our guide on Solana transaction fees explained.
Beyond Token Checks: Protecting Your Wallet
Rug pull detection is only one part of memecoin safety. You also need to protect the wallet you trade with. Never trade memecoins from your main wallet that holds your long-term holdings. Use dedicated burner wallets for each trading session or project. Revoke token approvals after trading using tools like revoke.cash. Keep your high-value assets on a hardware wallet that never interacts with unknown token contracts.
For a complete breakdown of wallet security practices, read our Solana wallet security guide, which covers burner wallet setup, permission revocation, drainer site avoidance, and why self-hosted bots like Vol Bot are safer than cloud services that hold your private keys.