Web3 & Startups
Rug Pull Red Flags: How to Spot High-Risk Token Contracts
Contract-level warning signs that distinguish a legitimate token launch from an exit scam waiting to happen.
LOZULA Senior Security Research Team
2026-04-14
7 min read
Key Takeaways for Security Teams
- An unaudited contract with an unlocked mint function is one of the clearest single red flags available.
- Liquidity lock duration and ownership renouncement are checkable on-chain before investing, not just marketing claims.
- This is general educational security information, not investment or financial advice.
Most rug pulls are visible in the contract before the exit happens, if you know which functions and ownership patterns to check. This is general educational information, not financial or investment advice.
Contract-Level Warning Signs
These are structural patterns in the token contract itself that are worth checking before any other due diligence.
- •Owner-controlled mint functions with no supply cap, allowing unlimited token creation
- •Blacklist or trading-pause functions the contract owner can trigger unilaterally
- •Liquidity that is not locked, or locked for a suspiciously short duration
- •Ownership that has not been renounced or transferred to a multi-sig or timelock
Beyond the Contract: Behavioral Signals
Some of the strongest signals are not in the code at all, they are in how the project behaves.
- •A team that is fully anonymous with no verifiable track record and no audit
- •Aggressive, time-pressured marketing pushing immediate buy-in
- •A public audit that either does not exist, or is unverifiable and not published in full