Most rug pull victims had every opportunity to spot the scam. They just didn't know what to look for.

Here are 5 on-chain signals I check before I put a single dollar into any project:

---

1. Unlocked Liquidity

If the deployer can remove liquidity at any time, they can drain the pool and leave you holding worthless tokens. Always verify liquidity locks on-chain — not just screenshots from the team.

2. Whale Concentration

When the top 10 wallets hold 60%+ of supply (excluding the contract and burn addresses), one coordinated dump can crash the price to zero. Check token distribution on the block explorer.

3. Unverified or Unaudited Contracts

If the smart contract source code isn't verified on the block explorer, you're trusting a black box. And even "audited" contracts need scrutiny — some audit firms will stamp anything for a fee. Check who did the audit.

4. Mint Functions Without Limits

Some contracts have owner-only mint functions that can create unlimited new tokens. This dilutes existing holders to nothing. Look for mint() functions with no cap in the contract.

5. Honeypot Mechanics

The contract lets you buy but not sell. Or it charges a 99% sell tax. These are called honeypots, and they're more common than you think. Always test with a tiny amount before going in.

---

This is just the surface. In my full masterclass, I cover 10+ more red flags, teach you how to read smart contracts for backdoors (no coding needed), and walk you through building a bulletproof multisig cold storage vault from scratch.

If you're holding more than you can afford to lose without proper security — that's a risk you're choosing to take every day you don't fix it.

🔐 ColdVault Academy — Rug Pull Red Flags & Multisig Cold Storage Masterclass