Anatomy of a Rug: What the Chain Showed First

Before anyone can buy

The outcome is mostly decided before the token is tradeable. Supply gets distributed to wallets that look unrelated, liquidity is seeded at a size that sets the starting price, and the creator decides which permissions to keep.

None of this is hidden. All of it is a sequence of ordinary transactions on a public ledger. It is simply boring to read, happens before anybody is paying attention, and requires knowing which accounts matter — which is a different skill from reading a chart.

The tell is rarely one wallet with a huge balance. That is the version people expect, so it is the version that gets avoided. The common shape is many wallets with moderate balances, funded from a common source shortly before launch, which reads as healthy distribution on any holder list that counts addresses rather than tracing them.

The quiet part

Then comes the stretch that is invisible unless you are looking for it. The price is rising, volume is real, and people are arriving. The wallets that were funded together begin to sell into that demand, gradually and unevenly, because selling all at once would move the price and announce itself.

This is the moment where the chart and the chain disagree most sharply. The chart says attention. The chain says the earliest holders are leaving and the newest ones are buying what they sell.

It is also the moment the social proof peaks. A token distributing to new holders while rising is exactly what a healthy launch looks like from the outside, which is why this stage draws the most buyers.

The exit

The withdrawal itself is almost an anticlimax. If the creator still holds the LP tokens, removing the pooled SOL is a single transaction requiring no special permission and no exploit. The token does not stop existing. It simply has nothing left to sell into.

That is why liquidity is the check that matters most, and why "mint authority revoked" on its own reassures people about an attack that was never going to be used. Removing liquidity needs no authority at all. It only needs you to have the LP tokens, which is the default state unless someone deliberately burned or locked them.

Why the chart is last

A price chart is a summary of trades that already happened. It is a genuinely useful instrument, and it is structurally incapable of telling you who traded or why. Every step above is a fact about wallets, and a chart contains no wallets.

This is not an argument against charts. It is an argument against using one as your only instrument, which is what most people do because it is the only one that is easy to read at a glance.

The checks that catch this are not clever, they are just tedious: who still controls the mint, whether the liquidity can be withdrawn, how the supply is really distributed, and what the developer has launched before. Tedious is why they get skipped, and skipping them is why this sequence keeps working.