How to Avoid Rug Pulls: A Pre-Buy Checklist for Memecoins

Definition

A rug pull is a coordinated exit-scam in which the deployer of a token drains the liquidity pool, dumps a large pre-mined allocation, or exploits a malicious function (mint, blacklist, tax) to make the token unsellable. Liquidity pulls and dev dumps are the two most common forms on Solana.

The 9-point pre-buy checklist

• **LP locked or burned**: Verify the LP tokens are in a Streamflow lock (12+ months) or burned to a null address.
• **Mint authority revoked**: No one can print new supply.
• **Freeze authority revoked**: No one can freeze your wallet.
• **Holder distribution**: Top 10 holders should hold < 25% combined; flag if a single wallet holds > 5%.
• **Bundler check**: Use a tool to detect if many "organic" wallets are actually funded by one source.
• **Trading age**: Pools < 24h old carry sniper-dump risk; pools < 1h are very high risk.
• **Honeypot test**: Simulate a sell on Jupiter or run MemesWorld's free audit to confirm the token is sellable.
• **Socials**: Active Telegram, X and website. Empty or recycled channels are a red flag.
• **Tax functions**: Solana SPL tokens don't natively support tax, but Token-2022 extensions do — check no transfer fee is enabled unless disclosed.

Red flags that almost always mean a rug

• LP unlocked or locked for < 30 days.
• Single wallet holds > 20% of supply.
• Mint authority still active.
• Promised "presale" with funds going to an EOA.
• Cloned logo and name of a trending token.
• Telegram with admin replies disabled and no real conversation.

Tools that automate these checks

• **MemesWorld Audit** — free 0–100 DEX-readiness score covering all of the above in one click.
• **DexScreener** — shows pool age, liquidity, holder count and LP status.
• **Solscan / Solana Explorer** — verify authorities and LP token vault contents.
• **Birdeye** — top-holder distribution and sniper/bundler flags.
• **RugCheck.xyz** — community-driven risk score.

If you suspect a rug in progress

• Sell immediately on the most liquid venue (usually Jupiter routes to the best pool).
• Don't try to "average down" — rugs accelerate.
• Report the contract on Telegram safety channels and the relevant indexers so the warning spreads.

Frequently Asked Questions

What is the most common type of rug pull?

On Solana, the most common rug is the deployer dumping a hidden pre-mined allocation right after launch. LP pulls used to dominate but have been largely eliminated by mandatory LP burns on launchpads like Pump.fun.

Can a token be safe even without an LP lock?

Only if the LP has been burned to a verifiable null address (the stronger version of a lock). Anything else — including "locked in the deployer wallet" — is rug-pull risk.

What is a honeypot in crypto?

A honeypot is a token that lets you buy but blocks or heavily taxes selling. On Solana this typically uses Token-2022 transfer-hook or transfer-fee extensions. Always simulate a sell before buying a new token.

Does a rug-pulled token's address ever recover?

Practically never. Once trust and liquidity are gone, recovery is virtually impossible. The community usually relaunches under a new mint address rather than trying to revive the rugged one.