How to Spot a Solana Rug Pull Before It Happens (2026 Guide)

By the MemeAssist Research Desk · Published 2026-08-02 · Updated 2026-08-02 · 9 min read

To spot a Solana rug pull before it happens, check five things on-chain before buying: top-10 holder concentration (under ~30% excluding pools), liquidity pool tokens burned or locked, mint and freeze authority revoked, no transfer hooks or suspicious token extensions, and the creator wallet's history. Most rugs telegraph at least one of these signals before the dump.

What is a rug pull on Solana?

A rug pull is when a token's insiders remove the ability to sell at a fair price — by draining the liquidity pool, dumping a concentrated supply, minting new tokens, or blocking transfers — leaving holders with a worthless asset. Chainalysis has repeatedly ranked rug pulls among the most common forms of crypto fraud, and on Solana the pattern is industrialized: launchpads like pump.fun make deploying a token nearly free, so scammers run rug factories that launch dozens of coins a day.

The good news: almost every rug mechanism leaves a fingerprint on-chain before the dump. You don't need luck — you need a checklist and about 60 seconds.

The 7 signals that precede most Solana rug pulls

These are ranked by how often MemeAssist's automated risk engine flags them on live tokens. Between late July and early August 2026, the engine logged over 1,200 individual rejection flags across candidate tokens — the distribution below is real telemetry, not theory.

1. Top-10 holder concentration (the #1 flag we log)

If ten wallets control most of the supply, they control the chart. Our engine's single most frequent danger flag is top-10 holder concentration — we have logged live tokens where the top 10 wallets held 83%, even 92%, of supply excluding liquidity pools. A healthy memecoin distribution generally keeps top-10 holders (excluding pools) under roughly 30%. Read the deep dive: why holder concentration is the #1 rug signal.

2. A single wallet holding a large slice of supply

Related but distinct: one wallet (often the creator, or a wallet funded by the creator) holding 20%+ of supply. Our engine has rejected tokens where a single wallet held 79% of supply. One click from that wallet ends the trade for everyone else.

3. Active mint authority

On Solana, if the mint authority hasn't been revoked, the deployer can print unlimited new tokens and dump them into the pool — instant, mathematically guaranteed dilution. This was the third most common flag in our telemetry (179 rejections). Verify it's revoked on any explorer, or run the token through a scanner. Details: mint authority, freeze authority and LP explained.

4. Unburned / unlocked liquidity

If the deployer still holds the LP tokens, they can withdraw the entire pool — the classic "liquidity rug." Our engine logged over 100 rejections for pools with 0% of LP burned or locked. On pump.fun graduates the LP is burned automatically at graduation, but for tokens launched elsewhere (or migrated manually) always confirm it.

5. Bundled launches and sniper rings

"Bundling" is when the deployer buys a large share of supply at launch through many fresh wallets in the same or adjacent transactions, faking organic demand. High bundler count was our fourth most frequent danger flag (160 rejections). Dozens of wallets created the same day, funded from one source, each holding 0.5–2%? That's one person wearing forty masks.

6. Transfer hooks and hostile token extensions

Solana's Token-2022 standard supports extensions like transfer hooks — code the developer controls that runs on every transfer and can block your sell. This is the honeypot pattern: you can buy but never sell. Our engine logged 58 transfer-hook rejections and 45 for active freeze authority (which lets the dev freeze your tokens outright). Unless a project has a documented reason for these extensions, treat them as disqualifying.

7. Creator wallet history

Rug factories reuse wallets and funding patterns. If the creator wallet (or its funding source) deployed previous tokens that went to zero, the current one is a product line, not a project. MemeAssist maintains a creator blacklist for exactly this reason — repeat offenders get auto-rejected before any other check runs.

How fast do rugs happen?

Faster than most people expect. Across our live paper-trading cohort (53 closed trades on freshly graduated pump.fun tokens, Jul 25 – Aug 2, 2026), 15% rugged even after passing every automated safety gate — and half of those rugs hit within roughly 90 minutes of entry. The full breakdown, including what the survivors looked like, is in how fast do Solana memecoins rug?

The lesson: safety checks filter out the obvious scams, but passing them is not a guarantee. Position sizing and exit discipline carry the rest.

A 60-second pre-buy rug-pull checklist

Holders: top-10 concentration (excl. pools) under ~30%; no single wallet over ~10–15%.
Authorities: mint authority revoked, freeze authority revoked.
Liquidity: LP burned or verifiably locked.
Extensions: no transfer hooks or permanent-delegate extensions.
Launch pattern: no obvious bundler cluster in the first block of buys.
Creator: wallet has no prior dead launches.
Socials sanity check: a real community argues, jokes and complains; a botted one only posts rockets.

You can run the on-chain half of this list manually on Solscan, or paste the token address into the MemeAssist analyzer and get the whole checklist — holder intelligence, authority status, creator history and an AI health score — in one report.

What a rug looks like when it's already happening

Liquidity dropping while price holds — insiders are exiting through the pool quietly.
A top holder splitting their bag across fresh wallets — pre-distribution before a coordinated dump.
Failed sell transactions from other wallets — the honeypot just switched on.
The creator wallet moving SOL to an exchange — cashing out precedes checking out.

If you see any of these while holding, the correct amount of deliberation is zero. Rugs don't reverse; exit first and investigate later.

Frequently asked questions

Can a token still rug if the LP is burned and mint authority is revoked?

Yes. Insiders holding a concentrated supply can still dump on the market — a 'slow rug' or dump — even when liquidity can't be drained and supply can't be inflated. In our live 2026 cohort, 15% of tokens that passed every automated safety check still rugged.

What's the fastest free way to check a Solana token for rug risk?

Paste the mint address into an analyzer like MemeAssist (free) to get holder concentration, mint/freeze authority status, LP status, bundler detection and creator history in one report. Manually, Solscan shows holders and authorities in about five clicks.

What percentage of top-10 holder concentration is safe?

There is no guaranteed-safe number, but under roughly 30% of supply in the top 10 wallets (excluding liquidity pools) is a common threshold. Our risk engine has flagged live tokens at 83–92% — at those levels the chart belongs entirely to insiders.

Are pump.fun tokens safer because LP is burned at graduation?

Graduation removes the liquidity-drain rug vector, but not supply-based rugs: bundled insider wallets, creator dumps and sniper rings all survive graduation. Most of the rugs in our data were graduated tokens.

What is a honeypot token on Solana?

A token you can buy but not sell. On Solana this is usually implemented with a Token-2022 transfer hook or freeze authority that blocks or reverts sell transfers. Checking for these extensions before buying takes seconds and defeats the trap entirely.

Do rug pulls happen mostly at night or low-volume hours?

Rugs cluster around liquidity events, not clock time — typically shortly after a hype spike when exit liquidity peaks. In our cohort, the median rug hit about 90 minutes after our entry near graduation.