> ## Content Index > Fetch the complete content index at: https://altcoininvestor.com/llms.txt > Use this file to discover other available public pages before exploring further. # On-Chain Signals That Separate Launchpad Winners From Rugs - URL: https://altcoininvestor.com/spot-rug-pull-on-chain/ - Published: 2026-09-08T17:11:18.000Z - Updated: 2026-09-08T17:11:19.000Z - Description: Wallet patterns, LP behavior, and holder concentration reveal rug pulls before launch. A 15-minute on-chain framework to filter out exits and preserve capital. - Author: Lana Sparrow - Tags: Blockchain Analysis, Crypto Scams, Project Funding & Launches, Intermediate ## The Question: How Do You Spot a Rug Pull Before You Lose Capital? ![Blockchain explorer interface displaying wallet addresses and transaction history for token analysis](https://cdn.getmidnight.com/13448471d89a9cd8d7f71026a0334ec8/2026/09/on-chain-rug-pull-analysis-after-h2-1.webp) Over 5,000 new tokens launch every single day across Ethereum, Solana, Base, and BSC. In 2025, rug pulls drained over $2.8 billion in investor capital. 85% of projects traded below their initial launch price. Most rug pulls occur in the first 24 hours after token creation. The signals are visible on-chain. Wallet patterns. LP token behavior. Holder concentration. Initial distribution structure. These indicators appear before the collapse, before the price dump, before the liquidity drain. They are traceable, verifiable, and readable by anyone who knows where to look. The question is not whether the data exists. It does. The question is whether you bother to check it before you commit capital. ## The Answer: Five On-Chain Signals That Separate Legitimate Launches From Exit Scams ![On-chain liquidity pool metrics and token holder distribution data displayed on analytics dashboard](https://cdn.getmidnight.com/13448471d89a9cd8d7f71026a0334ec8/2026/09/on-chain-rug-pull-analysis-after-h2-2.webp) Successful token launches share structural patterns. Failed launches share different patterns. The difference is visible on-chain within 15 minutes if you know which wallets to trace, which metrics to calculate, and which thresholds to apply. Here are the five signals that distinguish launchpad winners from rugs. ### Signal One: Team Allocation Above 15% in a Single Wallet Any single wallet or group of wallets owned by the same entity should hold less than 15% of the supply. A 15% sell-off can crash the token price instantly. Modern L1 projects launched from 2022 onward went live with exactly 0% of insider tokens liquid at TGE. Any project with liquid team tokens at launch is a warning signal. Check the top 20 holders. Look for wallets holding more than 15%. Then trace their funding sources. If multiple top holders were funded from the same source wallet, you are looking at a Sybil cluster. One entity controls multiple wallets. That entity can coordinate a dump. Use Bubblemaps or Arkham for visual cluster analysis. If the top holders form a connected graph, you have concentration risk. If they trace back to a single deployer address, you have a red flag. ### Signal Two: Unlocked or Partially Locked Liquidity Liquidity locks prevent holders of LP tokens from withdrawing their funds from a liquidity pool. This is achieved by sending LP tokens to a time-locked smart contract, usually through services like Team Finance. Without a lock, the deployer can remove all liquidity at any time. There are three LP states: - **Unlocked LP:** LP tokens sit in the deployer's wallet with no restrictions. Do not invest in tokens with unlocked liquidity unless you fully trust the team. This is the classic pool drain pattern. - **Partially locked LP:** Some LP tokens are locked or burned, but a portion remains in the deployer's wallet. Calculate what percentage is locked. If less than 80% is locked, the deployer can still damage the pool. - **Fully locked LP:** All LP tokens are in a time-locked contract. Check the lock duration. Locks shorter than 30 days may indicate higher risk. Minimum safe threshold is 90 days. You can verify LP locks manually using block explorers. Navigate to the token contract. Find the liquidity pool address. Check where the LP tokens are held. If they are in a contract with a time lock, read the lock expiration timestamp. If they are in the deployer's wallet, the liquidity is unlocked. ### Signal Three: Concentrated Initial Holder Distribution Token holder distribution refers to how a cryptocurrency's total supply is spread across different wallets. A healthy distribution is indicative of a community-driven project. Highly concentrated holdings signal vulnerabilities. The average number of holders per token decreased from 27,088 in 2020 to 12,429 in 2025\. Fewer holders means higher concentration. Higher concentration means higher rug risk. Check the holder count on Etherscan or the equivalent block explorer for the chain. Then check the top 10 holder concentration. If the top 10 holders own more than 60% of supply, you have extreme concentration. If the top 5 holders own more than 40%, you have a structural risk. Use the Herfindahl-Hirschman Index (HHI) to measure concentration. HHI is the sum of squared market shares. An HHI above 0.25 indicates high concentration. An HHI above 0.5 indicates extreme concentration. [Santiment provides on-chain holder distribution metrics](https://academy.santiment.net/metrics/supply-distribution/amount-of-holders/) that calculate HHI and Gini coefficients automatically. ### Signal Four: LP Token Holder Identity The identity of the LP token holder is one of the strongest predictors of rug risk. If the LP tokens are held by the contract deployer's wallet, the deployer can withdraw liquidity at any time. If the LP tokens are held by a known burn address (0x000000000000000000000000000000000000dEaD), the liquidity is permanently locked. ChainAware's rug pull detector checks the Trust Score of the contract creator and liquidity providers. The tool has 68% accuracy and identifies 68 out of every 100 rug pulls before they happen. A high rug pull risk score (above 0.7) should prompt you to avoid the investment entirely or conduct deeper due diligence. A low risk score (below 0.3) is encouraging but not a guarantee. The creator score is the strongest predictor. A deployer address that has launched multiple tokens that went to zero is a red flag. A deployer address that has never launched a token is neutral. A deployer address associated with verified projects is a positive signal. ### Signal Five: Vesting Schedule at TGE Modern token launches keep insider float at TGE at or near zero to avoid a first-week supply shock. If team tokens are liquid at launch, you have a vesting problem. If investor tokens are liquid at launch, you have a vesting problem. Check the token allocation documentation. Then verify it on-chain. Navigate to the team allocation wallet. Check the token balance. Check the transaction history. If the team wallet received tokens at TGE and those tokens are not subject to a vesting contract, the team can sell immediately. Vesting contracts are identifiable on-chain. They release tokens gradually over time. If the team allocation is held in a vesting contract, you can read the release schedule from the contract code. If the team allocation is held in a standard wallet, there is no vesting. a16z crypto's [operational guidelines for token launches](https://a16zcrypto.com/posts/article/token-launch-operational-guidelines/) recommend zero insider float at TGE and multi-year vesting schedules for team and investor allocations. Any project that deviates from this standard without explanation is a risk. ## How the Framework Works in Practice ![Developer examining smart contract code for team token allocation and vesting parameters](https://cdn.getmidnight.com/13448471d89a9cd8d7f71026a0334ec8/2026/09/on-chain-rug-pull-analysis-after-h2-3.webp) You can apply this framework in 15 minutes using free tools. Here is the step-by-step process. ### Step One: Check Team Allocation (3 minutes) Navigate to the block explorer for the chain. Enter the token contract address. Click on the "Holders" tab. Review the top 20 holders. Identify wallets holding more than 15% of supply. Click on each large holder. Review the funding transactions. If multiple top holders were funded from the same source, flag the token. ### Step Two: Verify Liquidity Lock (4 minutes) Find the liquidity pool address. On Uniswap V2 and clones, this is listed in the token's "Markets" section on the block explorer. Click the pool address. Check the LP token holders. If the LP tokens are held by the deployer's wallet, the liquidity is unlocked. If the LP tokens are held by a time-lock contract, click the contract. Read the unlock timestamp. If the unlock is less than 90 days away, flag the token. ### Step Three: Calculate Holder Concentration (3 minutes) On the "Holders" tab, calculate the combined percentage held by the top 10 wallets. If the top 10 hold more than 60%, flag the token. If the top 5 hold more than 40%, flag the token. If you have access to Santiment, check the HHI. If HHI is above 0.5, flag the token. ### Step Four: Trace LP Token Holder (2 minutes) From the liquidity pool holder list, click the wallet holding the LP tokens. If it is a burn address, the liquidity is locked. If it is the deployer's address, the liquidity is unlocked. If it is a contract, read the contract code to confirm it is a time-lock. If the contract has a withdraw function callable by the deployer, the lock is bypassable. ### Step Five: Check Vesting Schedule (3 minutes) Review the token's documentation for team and investor allocations. Find the team wallet address. Navigate to that address on the block explorer. Check the token balance and transaction history. If the team received tokens at TGE, check whether those tokens are in a vesting contract. If the team wallet has a large balance and no vesting contract, flag the token. ## When These Signals Matter and When They Don't This framework applies to permissionless launchpads like PinkSale, GemPad, and Pump.fun. These platforms support open-access token creation with no pre-launch vetting. Permissionless means higher rug risk. The framework is essential. For vetted launchpads like BSCPad or TrustSwap, the baseline risk is lower. These platforms audit projects before listing. But vetting is not a guarantee. A project can launch through a recognizable platform and still perform poorly. A token can pump at TGE and collapse after unlocks. The framework is less predictive for established protocols with multi-year track records. Curve Finance and Uniswap launched with large allocations to core teams and investors, but their vesting schedules and governance participation created long-term alignment. The critical factor is not the initial distribution but the vesting schedule and the long-term trend toward decentralization. The framework is most predictive in the first 24 hours. Research published in March 2026 developed a machine learning method to detect rug pulls within hours of a token's introduction by analyzing data from the first five minutes of trading. Most pulls happen in the first day. If you catch the signals early, you avoid the loss. ## Edge Cases That Break the Framework Sophisticated rug pullers know these signals. They distribute tokens across dozens of wallets to hide concentration. They lock liquidity for 30 days, then rug at day 31\. They use contracts with hidden mint functions that bypass the spirit of the lock. The slow rug is harder to detect. Instead of pulling all liquidity at once, the deployer gradually sells their token holdings while liquidity remains locked. The price slowly bleeds to zero. Holder concentration metrics catch this if you monitor them over time. If the top 10 holder percentage increases week over week while the price declines, you are watching a slow rug. The mint-and-dump pattern bypasses liquidity locks. The contract has a mint function. The deployer creates millions of new tokens and dumps them on the market, diluting existing holders to nothing. To detect this, review the token contract code. Check for a mint function. If the mint function is callable by the deployer and has no supply cap, the contract is exploitable. Partial locks are a gray area. Some deployers lock 80% of LP tokens and keep 20% unlocked to provide operational flexibility. This is not inherently a rug, but it creates risk. Review the pool and token contracts for privilege risks that can override the spirit of a lock, such as the ability to mint new supply at will, change fees, blacklist wallets, pause transfers, or route trading through a different pool. For deeper analysis of launchpad ecosystems and how regional platforms differ in risk profiles, see [Emerging Market Launchpad Ecosystems: What US Investors Miss](https://altcoininvestor.com/asian-latam-launchpads-crypto/). ## The Takeaway The blockchain is a receipt. Token launches leave traces. Team allocations are visible. LP locks are verifiable. Holder concentration is calculable. Vesting schedules are readable. These signals appear on-chain before the rug, before the dump, before the collapse. The framework takes 15 minutes. Check team allocation for concentration above 15%. Verify LP locks for duration above 90 days. Calculate holder concentration and flag top-10 ownership above 60%. Trace LP token holders to confirm locks are enforced. Check vesting schedules and confirm team tokens are not liquid at TGE. If any signal fails, walk away. In 2025, rug pulls drained $2.8 billion. 85% of projects traded below launch price. Most rugs happened in the first 24 hours. The data was public the entire time. The wallets were traceable. The transactions were verifiable. The receipts were there. Almost no one checked them. ## Frequently Asked Questions ### What is the single most reliable on-chain indicator of a rug pull? The identity and behavior of the LP token holder is the strongest single predictor. If LP tokens are held by the deployer's wallet with no time lock, the deployer can withdraw all liquidity instantly. ChainAware's rug pull detector confirms that the Trust Score of the contract creator and LP providers is the most predictive signal, with 68% accuracy in identifying rug pulls before they occur. Always verify LP token custody first. ### How long should liquidity be locked for a token to be considered safe? Minimum safe threshold is 90 days. Locks shorter than 30 days indicate higher risk. Many successful projects lock liquidity for six months to one year at launch. However, lock duration alone is insufficient. You must also verify that the lock contract does not have bypass mechanisms such as admin withdraw functions, mint capabilities, or transfer routing that circumvents the locked pool. ### Can a token with locked liquidity still be a rug pull? Yes. The slow rug pattern involves gradually selling team tokens while liquidity remains locked, causing the price to bleed to zero. The mint-and-dump pattern uses a hidden mint function to create new tokens and dump them, diluting holders without touching liquidity. Partial locks leave 20-30% of LP tokens unlocked for operational use, which still allows pool damage. Always check for contract privileges beyond the LP lock. ### What holder concentration percentage is too high? If the top 10 holders own more than 60% of supply, you have extreme concentration risk. If the top 5 holders own more than 40%, you have a structural vulnerability. Any single wallet holding more than 15% can crash the price with one transaction. Use the Herfindahl-Hirschman Index (HHI) for precise measurement. An HHI above 0.5 indicates extreme concentration that makes coordinated dumps trivial. ### How do I verify a liquidity lock manually on-chain? Navigate to the token contract on the block explorer. Find the liquidity pool address in the Markets or Pairs section. Click the pool contract. Review the LP token holders list. If LP tokens are held by a time-lock contract, click that contract address. Read the contract code to find the unlock timestamp and verify there are no admin functions that allow early withdrawal. If LP tokens are in the deployer's wallet, liquidity is unlocked.