Skip to content

Security and scams · Explainer

Rug Pulls in 2025: What the Loss Claims Really Show

Rug pulls can wipe out a token’s value, but the claim that 2025 was the worst year ever needs qualification. Here’s how to interpret the loss estimates, check a token before you buy, and act if something goes wrong.

By the SkyBitcoins editorial team · Updated

Did rug pulls really cost more than ever in 2025?

The evidence does not establish that rug pulls were more frequent in 2025 or that the year set a confirmed all-time loss record. One estimate published during 2025 said rug-pull activity was down 66% while losses approached $6 billion, with the Mantra Network case heavily shaping the figure. That is a striking estimate, not a final, independently settled tally for the whole year.

The distinction matters. A small number of very large incidents can raise total estimated losses even while the number of incidents falls. And the label “rug pull” is not always applied consistently: an abrupt collapse may be described as an exit scam, a project failure, a market event, or alleged misconduct, depending on the evidence.

Treat the headline as a warning about concentration and scale, not proof that every new token is more dangerous than before. The 2025 estimate was an in-year snapshot, not a complete annual total. As a reader in 2026, focus on the mechanics and evidence behind a specific project rather than relying on a single year-over-year claim.

What does a rug pull look like on-chain?

A rug pull is a broad term for a project’s insiders or operators abandoning it or taking value from its participants. It can happen in several ways:

  • Liquidity removal: A token creator pulls liquidity from a trading pool, leaving holders with little or no practical way to sell.
  • Sell restrictions: A token’s contract lets buyers purchase but blocks or heavily limits sales, sometimes while insiders can still trade.
  • Treasury or funds drained: People entrusted with project funds move them away, leaving users with losses and no functioning product.
  • Insider dumping: A concentrated group sells a large supply into public demand, crashing the price. This may be described as a rug pull, though the circumstances matter.

A sudden price collapse alone does not prove fraud. A token can fall because demand disappears, a market is thin, or a project fails. Conversely, a project can show activity and still have dangerous controls or concentrated ownership. Look for verifiable actions—such as a liquidity withdrawal or a changed contract permission—before repeating accusations. For your own decision, you do not need to prove criminal intent: a structure you cannot understand or verify is reason enough to stay away.

What should you check before buying a token?

Before buying, check the token and the people or contracts that can affect it. A polished site, busy social accounts, or a claimed partnership is not proof that funds are protected. Use a separate wallet for unfamiliar projects, and never disclose your recovery phrase or private key to “verify” an investment.

Use this checklist:

  1. Confirm the token address. Check it through more than one trustworthy channel; fake tokens often copy names and logos.
  2. Inspect the contract. Look for owner or admin powers, upgradeability, blacklist functions, trading limits, and the ability to change fees. If you cannot interpret these controls, do not assume they are harmless.
  3. Check supply concentration. Find out whether a few wallets hold a large share and whether those wallets are linked to liquidity or the project team.
  4. Verify liquidity details. Ask who controls the pool, what is locked or otherwise restricted, and when any restriction ends. A claim of “locked liquidity” is not a blanket safety guarantee.
  5. Try to understand selling conditions. A small test trade may reveal practical issues, but it cannot prove that selling will remain possible later.

If a crucial claim cannot be independently checked, treat it as unknown—not as reassurance.

Which warning signs deserve the most weight?

No single badge makes a token safe. An audit can find some classes of contract weakness, but it does not guarantee honest operators, sound economics, or safe admin settings. Check what was audited, which contract version was covered, and whether the deployed contract still matches it. If the project does not publish an audit, treat that as a risk factor rather than proof of wrongdoing.

Liquidity locks also need context. Confirm which pool and tokens are covered, who controls the lock, and its expiry. A lock may cover only part of the liquidity, or leave other ways for insiders to affect trading. “Renounced ownership” is not automatically reassuring either: it can remove some controls, but it may also make bugs or harmful settings impossible to fix.

Be wary of urgency, guaranteed returns, celebrity promotion, copied code presented as original, and pressure to buy before you have time to check. These are warning signs, not standalone proof of a scam. Likewise, anonymous developers are not proof of fraud, but anonymity can make accountability harder. Combine the evidence: contract permissions, wallet concentration, liquidity control, independent scrutiny, and whether the project’s claims can be verified.

How should you read 2025 rug-pull loss estimates?

A reported dollar loss can mean different things. It may estimate funds directly removed, calculate the value of a token or network’s collapse, or combine several kinds of incident. Those methods can produce very different totals. A large estimate tied to one case should not be read as the amount stolen from every affected person, or as a count of ordinary token launches that failed.

When you encounter a dramatic figure, ask:

  • What period does it cover, and is it a full-year total or an interim snapshot?
  • Does it count money allegedly taken, losses in market value, or both?
  • Is the incident confirmed as a rug pull, or is the label disputed?
  • Does one exceptional event account for much of the total?
  • Are the number of incidents and the dollar losses being reported separately?

For 2025, the estimate approaching $6 billion was reported alongside a 66% decline in rug-pull activity and was heavily influenced by the Mantra Network case. That combination illustrates why “fewer incidents” and “greater losses” can coexist. It does not, by itself, settle whether 2025 broke a record.

How can you limit your exposure before trading?

Set your risk limit before connecting a wallet or placing a trade. If losing the full amount would affect rent, bills, debt payments, or savings you need, do not put that money into a speculative token. A low token price does not mean low risk, and a small initial buy can still lead to larger losses if you add more after a sharp fall.

Keep your main holdings separate from wallets used for unfamiliar apps. Read each wallet prompt before signing: a token approval can allow a contract to move tokens later, while a transaction may do more than a simple purchase. Do not sign messages or transactions you cannot explain, and do not share your seed phrase with anyone claiming to provide support.

Avoid treating a fast price increase, high trading volume, or an influencer’s endorsement as a safety check. Thin liquidity can make a displayed price hard to realize when you sell. If you cannot verify who controls the contract and pool, or how you would exit, pass. There is no requirement to take part in every token launch, and waiting for clearer evidence is a valid decision.

What should you do if you think you were rugged?

If you suspect a rug pull, protect what remains before trying to recover what is gone. Do not pay an unofficial “recovery agent” or share your recovery phrase; follow-up scams often target people who have already lost money.

  1. Stop interacting with the project. Do not connect more wallets or sign new approvals because a message, website, or social account tells you to.
  2. Check your wallet’s token approvals. Revoke approvals you no longer need using a trusted wallet feature or tool, and confirm the network and contract address carefully. Revoking an approval does not reverse a completed transfer.
  3. Save evidence. Record transaction IDs, wallet addresses, token and contract details, dates, and copies of relevant project messages.
  4. Contact any exchange you used. Provide the transaction details if funds passed through its service. You may also report the incident to appropriate authorities in your jurisdiction.
  5. Secure related accounts. Change passwords if you reused them, enable multifactor authentication, and move unaffected assets to a wallet whose recovery phrase has not been exposed.

Blockchain transfers are generally irreversible. Reporting may help document the incident, but do not assume it will recover your funds.

Which mistakes can turn a risky token into a worse loss?

The biggest avoidable errors are confusing a popular token with a safe one, treating a locked-liquidity badge as a guarantee, and relying on screenshots or promotional claims instead of checking the actual contract and wallets. A “successful” small sale is not proof that the project cannot later restrict trading or remove liquidity.

Also avoid rushing because a launch is described as limited-time, buying more to recover an initial loss, or signing a transaction simply because it appears in a familiar wallet. Scammers can imitate project names and support accounts. Confirm the token address and transaction details independently, and use a wallet that makes the action legible before you approve it.

Finally, separate uncertainty from evidence. A falling price is not enough to establish a rug pull, but you do not need certainty about wrongdoing to protect yourself. If the contract permissions, liquidity arrangements, token distribution, or exit route are unclear, the practical choice is to avoid exposure. The 2025 estimates are a reason to examine how losses concentrate and how incidents are classified—not a reason to assume every token is a scam or that any checklist can eliminate risk.

Frequently asked questions

Is a rug pull the same as a crypto hack?

Not necessarily. A rug pull usually describes insiders abandoning a project or taking funds, while a hack involves an attacker exploiting a vulnerability. In practice, reporting may use the labels differently, so check what incident and losses a figure actually includes.

Does locked liquidity prove a token is safe?

No. A locked-liquidity claim is only one part of the picture, and it may not cover all the liquidity or risks. Check who controls the token, whether the contract restricts selling, and whether ownership or admin powers can change.

Can I reverse a rug-pull transaction?

Usually, a blockchain transaction cannot be reversed by your wallet or a support team. You can revoke token approvals to limit future access, but that does not recover funds already transferred or restore a token’s value.

Can a service recover crypto lost in a rug pull?

Be cautious of anyone promising guaranteed recovery or asking for an upfront fee, seed phrase, or private key. Preserve transaction records and report the incident to the exchange or relevant authorities where appropriate, but treat recovery claims as unverified.

Mentioned in this guide

dApps in this guide

Save logo

Save

Lending

Score 5.7 out of 10

Save lets you lend crypto or borrow against deposits, but check changing pool rates, unclear fees and audit details before using it.

TVL $70.9M−6.4%Solana · Eclipse

Keep reading

Related guides

All security and scams guides

Security and scams · Explainer

How to Assess the DecentraWorld Rug Pull

DecentraWorld was reported to have suffered a rug pull in May 2022 after its founders drained a BNB treasury, with losses valued at more than $1 million. Here’s what the incident means, how to check your exposure and how to avoid recovery scams.

Security and scams · Explainer

How the Failed Rainbow Bridge Exploit Cost $7,000

A Rainbow Bridge attack attempt was stopped before it could drain assets, and the attacker forfeited a bond worth roughly $7,000 at the time. Here’s how the defense worked and what the incident does—and doesn’t—tell you about using bridges.