What is a rug pull, and what can on-chain evidence show?
A rug pull involves abandoning a project while taking user funds. Price losses alone are not proof, and transaction evidence does not automatically identify a person.
In brief
A rug pull describes abandonment of a crypto project accompanied by taking users' funds.
The Turkish source cites Chainalysis's 2021 reporting: scam revenue rose by 82% to $7.8 billion, with $2.8 billion attributed to rug pulls. The report attributed approximately 90% of that rug-pull value to the centralized exchange Thodex. These are historical, attributed figures, not current estimates.
What evidence can show
Relevant patterns can include removing liquidity, minting and selling new supply, restricting sales through a contract, or transferring treasury funds while withdrawals are blocked.
Each pattern must be assessed on its evidence. A transaction hash, time and sending and receiving addresses can document a movement. They do not alone establish every element of a fraud allegation.
How to report it
“An address withdrew a specified share of a pool in a particular transaction” is a claim that can be checked against evidence.
“The founder deceived everyone” makes a personal allegation that is not established merely by observing an address. Concrete transaction reporting and personal accusations are not interchangeable.
What is not automatically a rug pull
A falling price does not prove funds were taken. A failed project, launch and a third-party exploit can produce losses without being the same event.
The relationship between an attacker and the project also requires evidence rather than assumption.
Risks and limits
Biggest uncertainty An address is not an identity; transactions do not by themselves prove motive or establish every element of an allegation.
Motive is not directly measurable on-chain. Addresses do not automatically identify owners.
Anonymous teams, unlocked liquidity or active minting powers may justify investigation, but none predicts a certain outcome. Conversely, an audit or is not insurance against abandonment.
How CryptoAlpha uses this
A case requires transaction evidence, timing and archived sources before publication. Unsupported allegations remain under investigation. Published reporting is corrected through visible revisions rather than silently deleted.
The legal history and outcome of the Thodex case and statistics after 2021 are outside this article's scope.
Sources
This article rests on the sources below. Whether each has a permanent copy is stated next to it.
- #1
Primary source cited by the Turkish original. Recheck before publication.
blog.chainalysis.com· no permanent copy· no screenshot
Evidence chain: 1 sources
Tweets get deleted, sites go down. Below is whether a durable copy exists for each source.
Sources (1)
- #1
Primary source cited by the Turkish original. Recheck before publication.
blog.chainalysis.com/reports/2021-crypto-scam-revenues/- no durable copy: if the source disappears, this claim loses its basis
- no screenshot captured