Rug Pull Checker: How to Check a Token Before You Buy It

Every trader who has spent more than a week in memecoins has a story about the one that got away, and a second, quieter story about the one that took their money with it. A rug pull checker exists for that second story. It scans a token's contract, liquidity and holders in seconds and tells you whether the thing you are about to buy has an exit door built in for the developers (and a locked one for you).

Sounds like magic? It isn't, and knowing exactly what these tools can and can't see is what separates a useful safety net from a false sense of security.

What Is a Rug Pull, Anyway?

A rug pull is the oldest trick in DeFi: a team launches a token, pumps it with hype, waits for buyers to pile in, and then pulls the value out from under them. The classic version is a liquidity pull, where the developers withdraw the token's paired ETH or SOL from the liquidity pool, leaving holders with a chart that goes straight down and nobody to sell to. Other versions are quieter, since a developer can mint billions of new tokens and dump them, raise the sell tax to 99%, or simply sell a massive team allocation into every green candle.

Not every rug pull scam looks the same, but they all share one feature: the exit was planned before the launch. The code allowed it, the liquidity wasn't locked, or the supply was concentrated in a handful of wallets, and all of those things are visible on-chain if one knows where to look. That is the entire premise of a rug pull checker.

Here are the main flavors to keep in mind, since each one leaves a slightly different trail on-chain:

• Hard rug: liquidity is removed or the contract blocks selling, and the token dies within minutes.
• Honeypot: you can buy, but the contract won't let you sell, so every buyer becomes a donor.
• Soft rug: the team slowly dumps its own bags over days or weeks while the chart "consolidates".
• Mint and dump: a hidden mint function creates new supply out of thin air, which then gets sold into the pool.

How Does a Rug Pull Checker Work?

A rug pull checker doesn't predict the future, and it can't read a developer's mind. What it does is read the token contract and the state of the chain around it, then compare what it finds against a list of known red flags. Most tools run three kinds of checks at once, which is why a scan that would take a human half an hour on Etherscan comes back in a couple of seconds.

Contract analysis

The first pass is the code itself. The checker looks at whether the source code is verified (unverified code is a black box, and black boxes are rarely full of good news), whether ownership has been renounced, and whether the owner still holds dangerous powers. The usual suspects are a mint function, a blacklist that can block specific wallets from selling, adjustable buy and sell taxes, a "pause trading" switch, and an upgradeable proxy that lets the team swap the entire contract for a new one after launch. Any one of these isn't automatically a scam, but each one is a lever someone could pull later.

Liquidity checks

Next comes the liquidity pool, which is where most rugs actually happen. A good scanner shows how much liquidity sits behind the token, who holds the LP tokens and whether they are burned or locked in a third-party locker, and for how long. Locked liquidity matters because it physically prevents the team from withdrawing the pool until the lock expires, and a lock that ends next Tuesday is a very different promise from one that ends in 2027. It also flags thin pools, since a $5k pool behind a "$2M market cap" means the price can move a mile on a single sell.

Holder and trade simulation

Finally, the better tools simulate a buy and a sell against the live contract, which is how a honeypot checker catches tokens you can buy but never sell (the same sell test Noti's Scam Alert runs before a snipe goes through). The same simulation reveals the real buy and sell taxes, as opposed to the ones written in the project's Telegram. Then there's the holder list: if the top ten wallets (excluding the pool and burn address) control 60% of the supply, one can imagine exactly how that story ends.

Red Flags a Rug Pull Checker Catches

Not all red flags are created equal. Some are deal-breakers, others just mean you should size down and keep a finger on the sell button — and a good scan report usually separates the two, since a rug pull scam rarely hides all of its levers at once.

The deal-breakers come first, and any one of them is reason enough to walk away:

• Can't sell in simulation: if the honeypot checker can't complete a sell, nothing else in the report matters.
• Owner can mint: unlimited supply means your share of the token can be diluted to zero at any moment.
• Unlocked liquidity: the developers can withdraw the pool whenever they like, and many of them eventually do.
• Sell tax above 20–25%: or a tax the owner can change after launch, which is effectively the same thing.

The "proceed with caution" flags are softer, but they still deserve a smaller position:

• Unverified source code: common with brand-new launches, but you are trusting code nobody can read.
• Concentrated supply: a few wallets holding a large share of tokens, especially fresh wallets funded from the same source.
• Short liquidity lock: a lock that expires in days rather than months buys the team time, not credibility.
• Upgradeable proxy contract: the code you scanned today might not be the code running tomorrow.

Which Rug Pull Checker Should You Use?

There is no single best tool, because each tool has a different focus and a different set of supported chains. Most experienced snipers run two of them on anything they are about to buy with real size, and one should do the same, since a second opinion costs nothing but ten seconds.

• Honeypot.is: a focused honeypot checker for Ethereum and BNB Chain that simulates a buy and a sell and reports the real taxes.
• Token Sniffer: scores EVM tokens on contract risks, liquidity and similarity to known scam contracts (copy-paste scams are surprisingly common).
• RugCheck: the go-to risk scanner for Solana tokens, showing mint and freeze authority, LP status and top holders.
• De.Fi Scanner and GoPlus: broader security scanners covering many chains, useful as a second opinion on contract permissions.
• Etherscan and DexScreener: not checkers as such, but where one goes to verify what the tools report, from the contract's owner to the pool's age and liquidity.

A quick note on Solana: SPL tokens don't have Ethereum-style contracts, so the key checks change. There, you want the mint authority and freeze authority revoked, since an active freeze authority is the Solana cousin of a blacklist and can stop you from moving your tokens at all.

Can a Rug Pull Checker Miss a Scam?

Absolutely. A rug pull checker is a snapshot of a token at one moment, and scammers know exactly what the popular scanners look for. Some contracts behave perfectly during the first few blocks and only switch on a hidden sell restriction later. Others pass every contract check with flying colors and then get soft-rugged by a team that simply sells its own bags, which is completely legal as far as the code is concerned.

Then there's timing, which no scanner can fully account for. Liquidity can be locked today and unlocked the moment the lock expires, a "renounced" owner can sometimes keep control through a separate privileged role, and a token with a clean report can still be front-run into a terrible entry price. A green score means "no obvious trap found", not "safe", and certainly not "this will 10x". Money still doesn't grow on trees, even on-chain. (Our guide to using a DeFi sniper bot safely covers the wallet-side habits that complement any scan.)

So what does that mean in practice? Use the scan as a filter rather than a verdict: it removes the obvious traps quickly, and what's left still deserves a position size you can afford to lose, an exit plan, and an eye on the pool after you buy.

Pros and Cons of Using a Rug Pull Checker

### Pros

• Speed: a scan takes seconds, which matters when every second counts at launch.
• Catches the obvious traps: honeypots, mint functions, unlocked liquidity and absurd taxes rarely slip past a decent tool.
• No technical knowledge required: you don't need to read Solidity to see that the owner can blacklist wallets.

### Cons

• Snapshot only: it checks the token once, while a rug can happen hours or days later.
• Blind to intent: a team dumping its own allocation looks perfectly normal to a contract scanner.
• False comfort: a high score tempts traders to oversize, which is how a small loss becomes a big one.

Case Study: The Squid Token That Couldn't Be Sold

In late October 2021, a token called Squid (riding the hype of the Netflix series) went from about 1 cent to over $2,856 in less than a week, trading on PancakeSwap. Buyers piled in, the chart looked incredible, and very few of them noticed one small problem: they couldn't sell. On 2 November 2021 the price collapsed to almost nothing, and the developers made off with an estimated $3.38 million, according to the BBC, citing Gizmodo.

Squid was a textbook honeypot. The contract let anyone buy but restricted selling, which is exactly the kind of trap a simulation-based honeypot checker catches by trying a sell before you do. Suspicious? You bet! A token "up 285,000%" that nobody can actually exit isn't a moonshot — it's a cage, and a ten-second scan would have shown it. Years later, Squid is still the rug pull scam every newcomer gets warned about, and the social playbook behind it is covered in our guide to meme coin scams.

How to Check a Token With Noti

Running a scan manually works fine when you have time, but a snipe happens in seconds, and nobody wants to paste a contract address into three tabs while a launch goes live. That is where the Noti sniping platform builds the same idea into the trade itself, so the checks happen as part of the snipe rather than before it.

1. 1
   Paste the contract address

   In the Noti web app or Noti's Telegram bot, and generate or connect a wallet.

2. 2
   Let Scam Alert run

   Noti runs simulations, such as checking that the token can actually be sold, to flag scams and honeypots before you commit.

3. 3
   Set up the snipe

   Choose the amount, price limit, gas and slippage, plus a selling strategy with your exit point.

4. 4
   Keep rug pull protection on

   After the purchase, Noti monitors the token for liquidity-pull activity and sells your tokens first if it spots one.

That last step is what a standalone scanner can't do, since it watches the token after you buy rather than only before. And because Noti sends transactions directly to block builders instead of the public mempool, your snipe stays invisible to MEV bots that would otherwise front-run your entry. Noti is live on Ethereum today, with Solana, Base and more coming soon.

Frequently Asked Questions

Is a rug pull checker 100% accurate?

No. A rug pull checker catches contract-level traps like honeypots, mint functions and unlocked liquidity, but it can't detect a team that plans to slowly dump its own tokens, and some contracts are built to pass scans at launch.

What is the difference between a honeypot checker and a rug pull checker?

A honeypot checker answers one question, which is whether you can sell the token after buying it. A rug pull checker usually includes that test and adds contract permissions, locked liquidity and holder concentration on top.

Does locked liquidity mean a token is safe?

Not on its own, because locked liquidity only stops the team from pulling the pool until the lock expires. They can still dump their own tokens or use other contract powers, so check the lock's length and the rest of the report too.

Can Noti protect me from a rug pull scam?

Yes, to a degree. Noti's Scam Alert flags tokens that fail its sell simulations, and its rug pull protection sells your position first if it detects liquidity-pull activity after you buy, though no tool can remove the risk entirely.

Conclusion

To sum it up:

• Scan before you buy: a rug pull checker filters out honeypots, mint functions and unlocked liquidity in seconds.
• Read the report, not just the score: red flags like concentrated supply or a short lock still deserve a smaller position.
• Keep watching after you buy: most rugs happen later, which is why post-purchase protection matters as much as the initial scan.

The early bird gets the worm, but only if the worm isn't attached to a hook. Run a rug pull checker on everything, size your trades for the risks it can't see, and let the Noti sniper bot watch the pool for you once you're in.