Can locked liquidity be rugged?
Yes, it can. Locked liquidity stops one thing: withdrawing the locked position from the pool before the unlock date, through that locker. Holders can still lose their money if the lock ends, covers only part of the pool, sits in a locker someone else controls, or if the token contract itself is the trap. Below is every path we know of, and a 60-second check for each.
The one-line rule. A lock is only as strong as the contract enforcing it and only as wide as what was put in it. If you need the basics first, read what locked liquidity is and what it proves.
1. The lock expires
Every time lock has a date. After it, the owner can withdraw the position and remove the liquidity like any other provider. A lock that ends a few weeks after launch does not prevent a rug pull, it schedules one. Check the unlock date, and check whether the team has extended locks before. What happens when a lock expires covers what changes on the day.
2. Only part of the liquidity is locked
A v2 lock covers an amount of LP tokens, not the pool. If 20% of the LP is locked and 80% sits in the deployer's wallet, "liquidity locked" is true and the pool can still be drained by 80%. In Uniswap v3 and v4 the same thing happens with positions: a pool can have several position NFTs, and locking one says nothing about the others.
3. Liquidity held outside the lock
Related but easier to miss: the team adds more liquidity after the lock, opens a second pool for the same token (a v2 pair next to a v3 pool, or a different fee tier), or keeps the main trading pool unlocked while a small one is locked. Buyers trade wherever the price is best, so the unlocked pool is the one that matters. Check every pool the token trades in, not just the one linked in the announcement.
4. A fake or self-written locker
Anyone can deploy a contract called "Locker". If the team wrote it, or the source is not verified, it may have a function that returns the position to them whenever they like. Screenshots of a "lock" in such a contract are technically true and worthless. Use a locker with verified source that you can read, and search that source for every function that moves tokens or NFTs out.
5. Admin, owner or migrator keys on the locker
Even established lockers can have privileged roles around locked positions. OpenZeppelin's audit of the UNCX Uniswap v3 liquidity locker (report dated February 2024) is a good example of what to look for. There, the contract owner can set fee options, the fee destinations, the auto-collector and a migrator, a contract lock owners can move their lock to. The auditors note that the owner could set the migrator to a malicious contract that effectively burns the positions of users who migrate, and that the system relies on UNCX controlling those roles and acting in users' interest.
That is not an accusation against UNCX. It is the general lesson: any path by which a locked position can leave the locker other than "owner withdraws after the date" is a trust assumption. Look for emergency withdraw, rescue, sweep, migrate, upgrade or proxy patterns, and find out who holds the key.
6. A bug or exploit in the locker
A locker is a smart contract, and smart contracts have bugs. Cointelegraph's explainer on liquidity lock risks describes a breach of the DxSale launchpad and locking service on BNB Chain that reportedly lost around $7.3 million from nearly 1,400 liquidity positions, with the attacker appearing to exploit an ownership override vulnerability. Its summary: "a lock is only as strong as the system enforcing it." Prefer lockers that are verified, not upgradeable, externally reviewed, and small enough to read.
7. The token contract is the trap
A liquidity lock does not touch the token. Several rugs work with the liquidity fully locked:
- Mint. If the owner can mint, they can mint a huge amount and sell it into the locked pool, taking the paired ETH out through swaps instead of a withdrawal.
- Taxes. A sell tax the owner can raise to 100% means nobody else can sell.
- Blacklist or pause. If the owner can block addresses or pause transfers, holders can be frozen while the team sells.
- Balance changes or a hidden owner. Functions that change balances, or ownership that can be taken back after a "renounce".
This is the honeypot family. Read the token's verified source, or at least a scanner's mint, tax, blacklist and pause flags, as well as the lock. In Uniswap v4, also check the pool's hook: it is code that runs on swaps and liquidity changes, and a hostile hook can do some of the same things.
8. Dumping, the slow rug
Locked liquidity does not stop large holders from selling. A team wallet holding 30% of supply can sell into a locked pool and pull most of the ETH side out through swaps. Check holder distribution, and look for team tokens in vesting rather than a wallet.
Is locked liquidity good or bad?
Good, as one signal. It removes the fastest and most common exit, pulling the pool, and it is the one safety claim anyone can verify on-chain in minutes. A long lock in a clean locker covering most of the pool is a real commitment by the team.
Bad, if it is treated as a verdict. The badge says nothing about the share locked, the date, the locker's keys or the token's code, and scammers know buyers look for it. For the team there are costs too: a locked v3 position cannot be re-ranged or moved until the date, so the liquidity may sit out of range if the price moves a long way.
So locked liquidity is good and necessary, and not sufficient. Use it as the first item on a checklist, not the last.
The 60-second check
- Who holds the LP tokens or position NFT? A locker, the dead address, or a wallet. (How to check if liquidity is locked shows how, on any explorer.)
- What share of the pool, and of every pool, is locked?
- When does it unlock?
- Is the locker's source verified, and is it upgradeable?
- Can anyone other than the lock owner move a locked position? Admin, emergency, rescue, migrate.
- Can the unlock date be shortened?
- Can the token mint, change taxes, blacklist or pause?
- Who holds the rest of the supply?
How HoodLock answers each point
This section is specific to HoodLock, which runs only on Robinhood Chain. v2 LP tokens go in the token locker. Uniswap v3 and v4 positions go in the Liquidity Locker. Each claim below points at something you can check in the published source.
| Check | HoodLock |
|---|---|
| Who holds it, how much, until when | The liquidity lock checker lists every v3 and v4 position HoodLock holds for a token or pool with its value and unlock date. The token lock checker does the same for ERC-20 locks, including v2 LP. |
| Verified, audited, not upgradeable | Both lockers are verified on Blockscout and audited by SBSecurity (security review), and none of HoodLock's contracts is upgradeable or sits behind a proxy (contract reference). |
| Admin, emergency or migration path | None. Only the lock owner can withdraw, and only at or after the unlock time. The token locker has no rescue, sweep or emergencyWithdraw. The Liquidity Locker has no migrate function, and its admin's stray-position return reverts for any position with an active lock. |
| Shortening the date | Impossible. extend requires a later date, so unlock times are extend-only. |
| What the admin can do | Change fees for new locks, where HoodLock's share is sent, pausing new locks and the reviewed v4 hook list, and trigger a fee collection that pays the lock's own fee recipient. No admin function can move a locked position or change an existing lock's date or fee rate. The full list is in the security model. |
| v4 hooks | If a hook can act when liquidity is removed and is not on the reviewed list, the app warns before locking. |
| Token mint, tax, blacklist, pause | Not covered. A lock cannot constrain a malicious token. Read the token too, for example with this Blockscout walkthrough. |
| Rest of the supply | Not covered by a liquidity lock. Team tokens belong in vesting or a token lock. |
Common questions
Can locked liquidity be rugged?
Yes. A lock only stops the locked position being withdrawn early through that locker. The lock can expire, cover only part of the pool, sit in a fake locker or one with admin or migration keys, have a bug, or the token itself can mint, tax, blacklist or pause.
Is locked liquidity good or bad?
Good as one signal: it removes the fastest exit and anyone can verify it. Bad if treated as a verdict, because a badge says nothing about the share locked, the unlock date, the locker's keys or the token's code.
Can a team withdraw locked liquidity early?
Only if the locker allows it, for example through an admin, emergency or migration function, or a date that can be shortened. In a locker with extend-only dates and no admin path, the owner can withdraw only at or after the unlock date.
Can a token with locked liquidity still be a honeypot?
Yes. Honeypots work through the token contract, with sell taxes, blacklists or pauses, and a liquidity lock does not touch the token. Check the token's code as well as the lock.
Does burning liquidity prevent a rug pull?
Burning removes the withdrawal path permanently, so it closes the expiry and locker-key risks. It does not stop token-level tricks like minting or taxes, or large holders selling into the pool.
Keep reading
- What locked liquidity is, and what it proves
- How to check if liquidity is locked
- What happens when a lock expires
- Rug pull red flags: a checklist
- How to choose a token locker
- Burning vs locking liquidity
Check a pool before you buy
Paste a token or pool on Robinhood Chain and see every HoodLock liquidity lock on it, with the amount, value and unlock date. No wallet needed.
Check locked liquidity →