HOODLOCK / LEARN

Rug pull red flags you can check yourself.

Published 2026-07-27 · HoodLock Team

Most rug pulls aren't sophisticated. They rely on nobody spending ten minutes checking things that are public. This is the list, in the order worth checking, with what each one actually looks like on-chain.

1. Liquidity that isn't locked

The fastest exit is withdrawing the liquidity pool. If LP tokens sit in a team wallet, that can happen in one transaction at any moment. Search the pair address on an explore page and confirm a lock exists, covers most of the LP supply, and hasn't expired. The full check is here.

2. A mint function

If the contract can create new tokens after launch, the supply you're looking at is a snapshot, not a limit. Read the verified source on the block explorer and search for a mint function and who can call it. An owner-callable mint means one address can dilute every holder at will.

3. Concentrated holders

Open the token's holder list. If a handful of non-contract addresses hold most of the supply, price is whatever those wallets decide. Exclude the LP pool and locker contracts from that count — those are supposed to hold large balances.

4. Team tokens with no vesting

A large allocation sitting unlocked in a wallet can be sold on any day. A vesting schedule converts that into a gradual, predictable release. Its absence on a big allocation isn't proof of anything, but it means nothing stands between the team and the market.

5. Unverified contract source

If the source isn't verified on the block explorer, nobody outside the team knows what the code does. Every claim about the token — supply, fees, transfer restrictions — is unverifiable. This alone is enough to walk away.

6. Transfer restrictions and hidden fees

Some contracts let an owner block selling, whitelist addresses, or change the transfer tax after launch. Buying works fine; selling doesn't. In verified source, look for owner-settable fee variables, blacklist mappings, and any condition on transfers that an address can toggle.

7. Ownership that was never renounced, or was faked

Renouncing ownership removes the owner's privileged functions. Check whether it actually happened on-chain rather than trusting a claim, and note that renouncing is not automatically good: it also removes the ability to fix bugs. What matters is whether privileged functions exist and who can call them.

Running the checklist

What this checklist can't tell you

Every item here is about whether someone can take your money quickly. None of it tells you whether a project will succeed, whether the team will keep working, or whether the idea is any good. A token can pass all seven checks and still go to zero through ordinary failure. Verify the mechanics, then judge the rest on its merits.

Common questions

What is the single biggest rug pull warning sign?

Unlocked liquidity. It is the fastest and most common exit, it can be executed in one transaction, and it is also the easiest thing on this list to verify. You can check it from the token contract address in under five minutes.

Does renouncing ownership make a token safe?

Not by itself. Renouncing removes the owner's privileged functions, but it also removes the ability to fix bugs, and it does nothing about unlocked liquidity or concentrated holders. What matters is which privileged functions exist and who can call them.

How can I tell if a token contract has a mint function?

Open the verified source on the block explorer and search it for a mint function, then check what restricts it. If the source is not verified, you cannot answer the question at all, which is itself a reason to stay away.

Can a token pass every check and still fail?

Yes. This checklist covers whether someone can take your money quickly, not whether the project is good. A token can be mechanically sound and still fail through ordinary execution risk.

Keep reading

Verify before you buy

Search any token address and read its locks, burns and vesting straight from the chain.

Check a token →