A rug pull is a type of crypto fraud where the developers of a project — typically a DeFi protocol, NFT collection, or token launch — abandon the project and steal investor funds after attracting sufficient liquidity or investment. The name refers to "pulling the rug out" from under investors: once capital is deployed, the perpetrators disappear. THE THREE TYPES OF RUG PULLS Hard Rug (Liquidity Pull): The most common DeFi rug. Developers create a token, build a liquidity pool (usually paired with ETH or BNB), attract investors who buy the token, then drain the entire liquidity pool using a backdoor ownership function or simply by removing their own LP tokens. Investors are left with tokens they cannot sell. Detection: Check if LP tokens are locked (using Team Finance, Unicrypt). Locked LP = developer cannot remove liquidity. Soft Rug (Slow Rug / Developer Dump): Developers gradually sell their token allocation over time rather than one immediate exit. The price slowly declines as insider supply is sold into community buyers. Eventually abandoned. Detection: Monitor wallet tracking of known dev wallets. Large dev allocation with short vesting = slow rug risk. Exit Scam: Project raises funds (IDO, private sale, presale), then disappears before delivering any product. No smart contract exploitation — simply fraud. FAMOUS RUG PULLS Squid Game token (SQUID, 2021): Gained viral attention based on Netflix show. Developers extracted $3.4M in a single minute by exploiting an anti-sell mechanism — buyers could not sell. OneCoin (2016-2019): The largest crypto fraud — $4.4B raised through MLM, no actual blockchain. Thodex (Turkey, 2021): Centralised exchange CEO fled with $2B in customer funds. Luna Yield (Solana, 2021): $6.7M drained on day of launch. RUG PULL DETECTION CHECKLIST Is LP locked for at least 6-12 months? (TokenSniffer, Team Finance). Is the contract ownership renounced? Can the contract mint unlimited new tokens? Check max supply function. Is there a blacklist function (can block specific wallets from trading)? Is the team anonymous with no verifiable identity? What is the token distribution — do top 10 wallets hold >50%? Use RugDoc, Token Sniffer, De.Fi Shield for automated risk scoring.