What Wallet Activity Can Appear Before a Rug Pull?
Some rug pulls leave on-chain traces beforehand — team wallets emptying, LP wallets waking up. Here's what that activity can look like.
A rug pull itself happens in a single transaction, but the wallets behind it don't necessarily appear out of nowhere. In some cases, on-chain activity in the hours or days before a pull follows patterns that are visible in advance, if you know where to look.
Team Wallets Reducing Their Own Holdings
One of the more observable patterns is a gradual increase in token transfers out of wallets known or suspected to belong to the project team, often routed through several intermediate addresses before reaching an exchange. A sudden acceleration in this activity, especially shortly after a price spike, is worth noting.
New Wallets Interacting With the Contract Shortly Before Launch Hype
Sometimes freshly created wallets, funded from the same source as the deployer wallet, appear and begin buying the token in the period just before a coordinated promotional push. This can indicate insider or team-controlled wallets positioning themselves ahead of a pump they know is coming.
Approvals or Contract Interactions That Expand Control
In some cases, a contract owner executes a transaction shortly before a rug pull that expands their own control over the contract or the pool — adjusting a parameter, or interacting with the LP token contract in a way that precedes a withdrawal.
The LP Token Wallet Itself Becoming Active
If liquidity was never locked, the wallet holding the LP tokens has had the ability to withdraw them since the pool was created — but that wallet is often otherwise dormant. A sudden transaction from a previously quiet LP-holding wallet can be one of the most direct precursors available.
Why These Signals Are Rarely Definitive on Their Own
None of these patterns guarantee that a rug pull is about to happen. The value of watching for these patterns comes from combining several of them, not treating any single one as conclusive proof.
Why Most Buyers Never See This Coming
Most of these signals require actively monitoring on-chain activity in real time. This is exactly why the more static checks matter more for most people: they can be checked once, at the moment of decision.
Check a token's current holder and contract status before buying — the deeper, real-time wallet monitoring described here is a more advanced layer on top of that baseline check.