Ghostbag

Risk checklist

How to spot a possible
memecoin rug pull.

There is no perfect rug detector. Use several independent checks, and treat a clean score as reduced uncertainty—not proof that insiders will behave honestly.

Check 01

Confirm the contract address

Names, tickers and logos are copyable. Open the address from more than one trusted route and make sure the chart, community and explorer all point to the same mint.

Check 02

Inspect mint and freeze authority

On Solana, mint authority can create more token units and freeze authority can freeze token accounts until those authorities are revoked or changed. Their presence is a capability that needs a credible explanation.

Check 03

Map holders, dev wallets and bundles

Look past the largest visible wallet. Several addresses funded together or buying in the same launch bundle may belong to one operator. Concentration makes a coordinated exit more damaging.

Check 04

Test the exit against liquidity

Headline value is not cash. Compare the position to available liquidity and estimated impact. A pool can show rising market cap while offering very little depth for a large sell.

Check 05

Watch liquidity and insider transfers

Large liquidity removal or sudden selling by controlling holders are serious warning signs. Chainalysis notes these behaviours can be consistent with pump-and-dump activity, but they are not definitive on their own.

Check 06

Ignore urgency as evidence

Guaranteed returns, countdowns, “last chance” messages and influencer consensus do not verify a token. The CFTC and SEC both warn against decisions based only on social tips and sudden spikes.

Primary references: Solana token authorities, Chainalysis on pump-and-dump signals, and the CFTC virtual-currency advisory.