In simple terms
A rug check is preliminary screening for conditions that could facilitate a rug pull or make a token difficult to sell. It is not a certificate; it is a snapshot of visible data and permissions at a particular time.
First layer: identity and contract
Start with the exact network and token address, compared with official channels. Inspect verified code, proxies and upgrade paths, administrative roles, minting, pauses, blacklists, transfer restrictions, and ownership. A verified contract makes code readable; it does not automatically make it safe.
Second layer: economic control
Review holder concentration, connected wallets, allocations and vesting, available liquidity, ownership of LP positions, and the ability to remove them. A small test sale may reveal restrictions but cannot predict every future condition. Communications, declared identities, and paid promotion complete the technical review.
What it does not prove
No score, audit, lock, or ownership renunciation guarantees the absence of bugs, collusion, compromised keys, alternative proxies, or market loss. A rug check reduces unanswered questions; it does not turn a risky token into a safe investment or prove that misconduct will occur.
Sources
- MetaMask, How to avoid scammers, rug pulls, and airdrop scams — Connects rug pulls with token distribution, promotion, and liquidation of positions.
- OpenZeppelin, Access Control — Documents ownership, roles, administrative privileges, and contract-control models.
- Ethereum.org, Ethereum security and scam prevention — Collects checks for addresses, signatures, spending limits, and smart-contract interactions.