How to Spot a Solana Rug Pull Before It Happens: 10 Red Flags

Feb 2026 · 8 min read

Thousands of tokens launch on Solana every single day. On pump.fun alone, the average lifespan of a token is measured in hours, not days. The vast majority of these tokens exist for one purpose: to extract money from buyers before the creator disappears.

A rug pull is when a token's creator (or a coordinated group) sells their holdings, removes liquidity, or exploits token mechanics to drain value — leaving everyone else with worthless tokens. The good news: most rug pulls leave detectable on-chain traces before they happen.

Here are the 10 red flags that reliably predict a rug pull on Solana.

1. Mint Authority Still Enabled

Risk: Critical. If the mint authority is still active, the token creator can mint unlimited new tokens at any time, instantly diluting your holdings to zero. On Solana, a legitimate memecoin should have its mint authority revoked after initial supply creation. This is the single easiest check and the most important one.

2. Freeze Authority Still Enabled

Risk: Critical. Freeze authority allows the creator to freeze any wallet's token balance, preventing you from selling. This is used in "honeypot" scams — tokens you can buy but can never sell. Like mint authority, freeze authority should be revoked for any legitimate memecoin.

3. Concentrated Holder Distribution

If a small number of wallets hold a disproportionate share of the supply, those wallets can crash the price at any time by selling. Look at the top 10 holders — if they collectively hold more than 30-40% of supply (excluding liquidity pools and known program addresses), that's a serious warning sign.

Be careful with this metric: some scammers split holdings across dozens of wallets to make the distribution look healthy. That's where bundle detection becomes critical (see #5).

4. Liquidity Not Burned or Locked

Risk: High. When a token's liquidity pool (LP) tokens aren't burned or locked, the creator can remove all liquidity at any time — pulling the rug literally. On Raydium, LP tokens should ideally be burned (sent to a dead address). If LP tokens are unlocked and sitting in the creator's wallet, the rug can happen at any moment.

5. Bundle Activity at Launch

Bundling is when multiple buy transactions are packed into the same Solana transaction as the liquidity addition. This means insiders are buying the token in the exact same block as the launch — before anyone else can. They typically use fresh wallets funded from a common source.

If you see 5+ wallets buying in the first transaction, all funded from the same source wallet, that's a coordinated launch designed to give insiders a massive position that they'll dump on retail buyers.

6. Creator Has a History of Short-Lived Tokens

Serial ruggers don't stop at one. If the wallet that created the token has also created 5, 10, or 50 other tokens — and those tokens all died within hours or days — that's one of the strongest predictive signals available. Check the creator's wallet history: how many tokens have they launched, and how did those tokens perform?

7. Dev Wallet Selling Early

If the developer or creator wallet starts selling tokens within the first few hours of launch, they're extracting value. Small sells might be "taking profit," but if you see the dev wallet selling more than 20-30% of their allocation quickly, that's a strong exit signal. Track the dev wallet in real-time — once they start selling, the clock is ticking.

8. Sniper Bots Dominate Early Buys

If the first 10-20 buyers are all bot wallets (identifiable by their speed, transaction patterns, and fresh wallet status), that means organic demand is low. Sniper bots buy at launch and sell quickly — they don't create sustainable price floors. A token where 50%+ of initial volume is sniper activity often has no real community behind it.

9. No Social Presence or Fake Socials

While on-chain signals are most reliable, off-chain context matters too. A token with no website, no Twitter/X account, or a freshly created Twitter with purchased followers is higher risk. However, don't rely on social presence alone — some rugs have elaborate social media campaigns, and some legitimate memecoins start with nothing.

10. Abnormally High Rug Score

Instead of checking each signal individually, risk scoring systems combine all of these factors into a single number. A composite rug score that factors in holder concentration, authority status, LP health, bundle activity, insider networks, and more gives you a quick read on overall risk.

Check All 10 Red Flags in Seconds

DeFade's analyzer checks all of these signals automatically across 14 on-chain modules. Paste any Solana token address and get a complete risk breakdown — free, no sign-up.

Scan a Token Now →

How to Actually Use These Signals

No single red flag is a guaranteed rug indicator. Mint authority enabled on a 2-day-old pump.fun token is very different from mint authority enabled on an established DeFi protocol. Context matters.

The most effective approach is to look at these signals in combination. A token with mint authority revoked, LP burned, a clean holder distribution, no bundle activity, and a creator with a good track record is dramatically safer than one failing on multiple signals.

Speed also matters. In the memecoin market, you often have minutes to make a decision. That's why automated analysis tools that can check all of these signals simultaneously are essential — you can't manually verify 10 different signals across block explorers in the time it takes for a pump.fun token to 10x or go to zero.