The Cheapest Trick in Crypto Still Works, and a Former Mayor Just Proved It

The oldest scam in crypto did not need a former mayor to stay profitable, but it got one anyway. In January, a token carrying the NYC name and tied to Eric Adams fell more than 81% within roughly thirty minutes of its launch on Solana, erasing about $500 million in peak paper value. A token launch that ends this way is not a bug in the system. It is the system working exactly as designed for the person who set it up.

The mechanics are almost insultingly simple. Someone mints a token, pairs it with real money in a liquidity pool, waves it in front of a crowd, and then pulls the real money back out once enough buyers have arrived. The buyers are left holding a coin that nobody can sell into anything. That is a rug pull, and it remains the cheapest reliable trick in the entire market.

The volume is the whole story

Roughly five thousand new tokens hit chains like Ethereum, Solana, Base, and BSC every single day. Most are noise. A meaningful slice are traps.

You cannot manually vet that firehose. No human can. So the market has quietly split into two behaviors: people who click buy on a green candle and hope, and people who check whether the exits are welded shut before they walk in.

The second group is smaller. It is also the group that tends to still have money by the end of the quarter.

Chainalysis put the scale in plain numbers. Crypto scams and fraud pulled in at least $14 billion on-chain in 2025, a figure the firm expects to climb past $17 billion as it labels more wallets. The average scam payment jumped to $2,764, up from $782 the year before. People are not just getting scammed more often. They are getting scammed harder each time.

What the honest launches actually do differently

Here is the uncomfortable part for anyone who finds diligence boring. The defenses against a rug pull are not exotic. They are old, well-understood, and mostly ignored because they are dull.

Lock the liquidity. When a project deposits its liquidity into a time-locked contract, the team physically cannot yank the trading pool out from under buyers until the lock expires. Anyone can read the lock on-chain. It is the difference between a landlord who hands you a lease and one who keeps the locks changeable from his phone.

This is the entire premise behind Team Finance, which lets projects lock liquidity and vest team tokens in contracts that anyone can inspect. The value is not that it makes a token good. It makes a specific, common lie expensive.

Because a locked pool changes the scammer's math. If the fastest exit — draining the pool on day one — is bolted shut for six or twelve months, the cheap trick stops being cheap. The scammer now has to wait, hold a position, and hope the token survives long enough to matter. Most do not bother.

The lock is only as good as its expiry

But a lock is a promise with a clock on it, and clocks run out.

Scammers learned this fast. The current favorite is the "lock extension rug": lock liquidity for six months, build a community and a chart, then days before expiry announce a generous-sounding extension — and simply let the original lock lapse and drain the pool the moment it opens. The trust built during the lock becomes the bait.

So reading a lock is not a one-time checkbox. It is a habit. When does it expire? Who holds the keys? Does the vesting schedule for the team's own tokens line up with the promises in the announcement, or does the founder's bag unlock suspiciously early? A lock that expires next Tuesday is not protection. It is a countdown.

None of this requires you to be a smart-contract engineer. It requires you to look, and to know that looking is even an option.

Why the boring infrastructure keeps winning

The honeypot is the crueler cousin of the rug pull, and it has spread through 2026. Here the liquidity looks locked and the chart looks alive, but hidden code in the contract quietly blocks everyone except the creator from selling. You can buy all day. You just can never leave. The price only goes up because the sells are mechanically impossible, which reads as bullish to anyone not checking the code.

This is why the launch venue matters as much as the token. A launch platform that enforces contract standards, locked liquidity, and vesting before a project ever reaches buyers is doing the vetting that no individual can do at the speed tokens now appear.

TrustSwap Launchpad sits in that lane, gating launches behind the kind of checks — locked liquidity, structured vesting, audited contracts — that turn a coin flip into something closer to due diligence. It does not promise a token will succeed. Nothing can. It removes a category of failure that has nothing to do with whether the idea was any good.

The tell is usually in the vesting, not the pitch

Most buyers read the wrong document. They read the announcement — the roadmap, the promises, the partnerships that may or may not exist. The document that actually predicts behavior is the vesting schedule, and almost nobody opens it.

Vesting is the timetable on which a team's own tokens unlock. A founder who agrees to a long, gradual release is a founder betting on the project surviving, because their payout depends on it lasting. A founder whose allocation unlocks in a giant cliff three weeks after launch has told you, in math, exactly when they plan to leave.

The announcement is marketing. The vesting contract is a confession. One is written to persuade you; the other is written to bind the person who wrote it, which is precisely why it is more honest.

This is the quiet argument for tooling that publishes both the liquidity lock and the vesting terms on-chain where anyone can read them before buying. Not because it guarantees virtue. Because it forces the founder to put the timetable in public, and a public timetable is much harder to lie about than a Twitter thread. The habit worth building is small and unglamorous: before you buy, find out when the people who made the token are allowed to sell it. If that date is soon, the pitch does not matter.

The counterargument, taken seriously

Now the honest concession. None of this stops a determined fraud, and pretending otherwise would be its own kind of scam.

A locked pool does not stop a founder from dumping their vested allocation the second it unlocks. An audit is a snapshot, not a warranty — plenty of audited projects have still gone to zero through bad management, market conditions, or a clever exploit the auditors missed. Verification tells you the doors and windows are locked. It says nothing about whether the house is worth living in.

And the deeper problem is cultural. The Adams token did not draw half a billion in paper value because people carefully weighed its liquidity structure. It drew that because a famous name was attached and the chart was moving. Greed does not read contracts. It reads momentum, and momentum is exactly what a rug pull manufactures on purpose.

So the tooling is necessary and insufficient at the same time. It raises the floor. It cannot raise the ceiling of human impulse.

The part the market keeps relearning

Every cycle produces a fresh crop of people who discover, in real time and with their own money, that a green candle is not a promise. The names change. A former mayor here, an AI-branded token there — the Wolf token that briefly touched a $40 million market cap before collapsing more than 99% in a matter of days. The mechanics never change at all.

What is changing, slowly, is that the checking is getting easier. On-chain locks are public. Contract analysis tools are a browser tab away. The information asymmetry that made rug pulls trivial in 2021 has narrowed, not because scammers got scrupulous, but because verification became something an ordinary buyer can actually perform.

The scammers know this too. It is why they have moved upmarket into lock extensions and honeypots — the tricks that survive a casual glance. The casual glance is no longer enough, and it never really was.

There is a version of this market where checking the locks is as reflexive as checking the price. We are not there. But the tools are already built, sitting mostly unused, waiting for the next former mayor to remind everyone why they exist. The only real question is how many more half-billion-dollar lessons the market needs before boring becomes the default.