How to spot a rug on pump.fun

On pump.fun the classic "mint more tokens" rug is mostly closed off. The risk has moved to who holds the supply and whether you're buying the real coin.

Updated Fact-checked November 4, 2026 8 sources
Short answer

Check who holds the supply, not just the chart. On a standard pump.fun coin the mint and freeze authority are already revoked (6 of 6 coins we sampled on 4 November 2026), so the usual rug is a dump: a dev wallet, a bundle of wallets bought in the same block, or a few top holders selling at once. Before buying, confirm the contract address, then check top-10 %, dev holdings %, bundlers % and snipers %, and look for clones with the same ticker.

Why pump.fun rugs look different

On many token launchers a rug means the creator mints new tokens or freezes your wallet. On pump.fun that’s mostly closed off. We read six coins trading on pump.fun’s bonding curve from the Solana chain on 4 November 2026: all six were Token-2022 coins with no mint authority, no freeze authority and a supply of about 1,000,000,000.

That leaves two ways people lose money to a “rug” on pump.fun:

  1. Holders dump. The creator, a bundle of linked wallets, or early snipers own a big share and sell into the curve or the pool at once.
  2. You bought the wrong coin. A clone with the same name and ticker, often not from pump.fun at all.

Both are checkable before you buy. Run them in this order; the coin check automates most of them.

The 8 checks

#CheckWhereWarning sign
1Contract address is the real oneThe coin’s pump.fun page, or the creator’s verified accountYou found it by ticker search or a DM
2No clones you’re confusing it withSearch the ticker on a DEX screenerSeveral coins with the same name; yours is the newest
3Top-10 holder sharepump.fun coin page “top 10 %”A high share outside the bonding curve or pool account
4Dev holdingspump.fun “dev holdings %”Creator still holds a large slice, or has sold most of it already
5Bundlerspump.fun “bundlers %”Many wallets bought in the same block
6Sniperspump.fun “snipers %”A big share bought in the first blocks
7Mint, freeze and transfer taxExplorer or checkerAny mint or freeze authority; a transfer-tax warning
8Mayhem Modepump.fun Mayhem board or coin pageExtra 1B supply and an agent that may sell

1. Get the contract address from the source

Every Solana coin has a contract address, also called the mint. It’s the only thing that identifies a coin: names, tickers and images can be copied by anyone. pump.fun’s terms (§8.6) say a token with the same name or ticker on another network “is not the same Digital Asset”. Copy the address from the coin’s own pump.fun page or the creator’s verified X account, never from a reply or a DM.

2. Check for clones, and ignore the suffix

Most pump.fun addresses end in “pump”, which leads people to treat it as a seal of approval. It isn’t:

  • open-source pump.fun SDKs include vanity address generators, so an address ending in “pump” can be made for any token on any launcher;
  • not every pump.fun coin has the suffix: one of the six bonding-curve coins we checked (3HZ97ZA5…DoP3) doesn’t.

Search the ticker on a DEX screener. If several coins share it, compare creation time, liquidity and holder count, and make sure the address you hold matches the one on pump.fun. Paid “verified” profiles on screeners are bought, not checked.

3. Holder concentration

The top-10 figure on pump.fun’s coin page shows how much supply sits in the ten largest wallets. On the bonding curve, the curve’s own account holds the unsold supply; that isn’t a person. Outside that, a few wallets holding a large share can end the coin with a few clicks. Holder-cluster tools such as Bubblemaps show whether “different” wallets were funded from the same source.

4. The dev wallet

pump.fun shows “dev holdings %”. A creator who still holds a large share can sell into your buys. A dev who has already sold everything says something too. pump.fun also flags coins created “offchain”, where the wallet shown as the deployer may not be the real creator.

5. Bundles

A bundle is when the creator buys from many wallets in the same block or Jito bundle, so the holder list looks spread out when it’s really one person. pump.fun’s “bundlers %” estimates the share held by bundled wallets. Commercial launch kits sell this as a feature, so assume it’s common.

6. Snipers

Snipers are bots that buy in the first blocks after launch. A high “snipers %” means a lot of supply was bought at the lowest prices by holders who usually sell into the first wave of buyers.

7. Mint, freeze and transfer tax

A standard pump.fun coin has none of these, which makes any deviation a red flag. Two exceptions to know:

  • Transfer tax: Token-2022 coins can take a creator-set percentage on every transfer, buys and sells included. pump.fun shows a warning tooltip when a coin has one.
  • A coin that isn’t from pump.fun at all can have live mint or freeze authority. A checker such as RugCheck shows both.

8. Mayhem Mode

Mayhem Mode is an opt-in launch setting where an AI agent mints an extra 1 billion tokens (2 billion total) and buys and sells for the first 24 hours, then burns what it hasn’t sold. pump.fun’s own docs warn that if the agent ends up a net seller, not every holder may be able to sell back into the curve. See Mayhem Mode explained.

What no check can tell you

These checks catch the obvious setups. They can’t tell you whether a coin’s price will hold: a coin with a clean holder list still goes to zero if buyers stop coming. Solidus Labs found 98.6% of pump.fun coins showed rug-pull or pump-and-dump traits (May 2025). Keep amounts small, and read is pump.fun safe and pump.fun scams.

Questions people ask

How do I check if a pump.fun coin is a rug?

Paste its contract address into a checker and look at holder concentration: top-10 %, dev holdings, bundlers and snipers. On pump.fun, mint and freeze authority are normally already revoked, so a rug is almost always concentrated holders selling.

Does a contract address ending in "pump" mean it's real?

No. Open-source tools generate addresses with any ending, and some genuine pump.fun coins don't end in "pump". One of six bonding-curve coins we checked on 4 November 2026 didn't. Get the address from the coin's own pump.fun page.

Can a pump.fun dev mint more tokens?

Not on a standard coin: the six we checked on 4 November 2026 had no mint authority and a fixed supply of about 1 billion. Mayhem Mode coins are the exception: an AI agent mints an extra 1 billion tokens at launch.

Sources

  1. Solana mainnet RPC getAccountInfo on six pump.fun bonding-curve mints listed by GeckoTerminal, 4 November 2026
  2. pump.fun web app coin audit strings (dev holdings, top 10, snipers, bundlers, transfer tax), Internet Archive copy 2026-10-23
  3. pump.fun Mayhem Mode docs, Internet Archive copy 2026-10-19
  4. pump.fun Terms of Use, last updated 17 October 2026 (§8.6: same ticker on another network is not the same asset), Internet Archive copy 2026-10-31
  5. nirholas/pump-fun-sdk on GitHub (vanity address generation)
  6. Forklog: Solidus Labs, 98.6% of pump.fun memecoins tied to rug pulls or pump-and-dumps (May 2025)
  7. RugCheck (Solana token risk reports)
  8. Bubblemaps (holder cluster maps)