🚩 10 Red Flags That Scream Rug Pull (Before It Happens)

After analyzing 141+ failures, the patterns are clear.

We've documented over $500B in crypto losses. Here are the 10 red flags that appeared in 90% of rug pulls before they happened.

1. Anonymous Team If you can't find real identities, they can't be held accountable. OneCoin's Ruja Ignatova vanished with $4B. The Africrypt brothers (ages 18 and 21) disappeared with 69,000 BTC.

2. Locked Liquidity That Isn't Really Locked Check the actual lock contract. Many "locked" LPs have backdoors. Meerkat Finance drained $32M in 24 hours despite "locked" liquidity.

3. Unrealistic APY Promises - BitConnect: 1% daily (3,780% APY) → $3.5B gone - Celsius: 18% APY with no clear source → $12B gone - Finiko: 30% monthly → $1.5B gone

If yields are impossible, they're funded by new deposits (Ponzi).

4. No Audit or Fake Audits Real audits come from: Trail of Bits, OpenZeppelin, Consensys Diligence, Certik (with caveats). Check the audit date and scope. Many projects audit one contract and deploy another.

5. Admin Keys or Mint Functions If the team can mint infinite tokens or drain contracts, they will. Paid Network had an infinite mint function exploited for $27M.

6. Aggressive Marketing, No Product When marketing spend exceeds development, run. FTX spent millions on Super Bowl ads while the balance sheet was a lie.

7. Rushed Token Launch Projects that launch tokens before having a working product are extracting value, not creating it.

8. "Maintenance" Announcements Thodex announced "partnership negotiations" before the CEO fled with $2B. When withdrawals pause, exit immediately.

9. Insider Selling Alex Mashinsky withdrew $10M from Celsius before freezing user funds. Watch wallet movements, not marketing.

10. The Community Attacks Skeptics Healthy projects welcome due diligence. Cults attack questioners. Terra/LUNA's community ridiculed critics until the $40B collapse.

The Bottom Line

Due diligence isn't FUD. It's survival.

Before investing, ask: - Who is the team? Are they doxxed? - Is there a working product? - Are contracts audited? - Who controls admin keys? - Where do yields come from?

If you can't answer these questions, you're gambling, not investing.

Subscribe to Failure Files for weekly red flag alerts →