A token rug score typically centers on identifying contract-level permissions and structural patterns that enable abrupt or stealthy exit-blocking or supply manipulation. Key mechanisms include owner-controlled whitelist checks in transfer functions that allow buys but revert sells, adjustable sell taxes that can be increased post-launch to disincentivize selling, and active mint or freeze authorities that permit supply inflation or wallet-level transfer halts. These patterns manifest as explicit require() statements, owner-only setters for tax rates, or unrenounced administrative keys. Mechanically, they create asymmetries in token transferability or supply control, which can be detected through static contract analysis without requiring trading history. The score aggregates these signals to quantify potential rug pull risk based on structural capabilities rather than observed events.
This pattern becomes risk-relevant primarily when the permissions enabling exit blocking or supply inflation remain owner-controlled and modifiable post-launch, especially without transparent governance or timelocks. For example, a whitelist that the owner can update arbitrarily to block sells from any address is a classic honeypot enabler. Similarly, adjustable sell taxes that can spike suddenly impose hidden exit costs. Conversely, these patterns can be benign if the contract’s owner renounces control or if the permissions are retained for operational reasons clearly communicated to users, such as mint authority for scheduled token releases or freeze authority for compliance. The presence of these permissions alone does not confirm malicious intent but signals the technical potential for rug-like behavior.
Additional signals that would shift the risk assessment include on-chain evidence of past permission changes, such as the owner modifying whitelist entries, increasing sell taxes, or minting new tokens unexpectedly. Conversely, transparent governance mechanisms like multisig controls, timelocks on critical functions, or public audits that confirm permission renunciations would reduce perceived risk. The presence of a pause function combined with documented usage patterns can also inform whether the capability has been wielded responsibly or abused. Without such contextual signals, a token rug score based solely on contract structure remains a probabilistic indicator rather than a definitive judgment.
When combined with other common conditions, the realistic outcomes of these patterns vary widely. For instance, a token with a shallow liquidity pool and active owner-controlled exit restrictions can trap buyers and cause rapid price collapses when the owner exercises these controls. In contrast, tokens with deep liquidity and decentralized governance may retain similar permissions but never exercise them maliciously, resulting in no adverse market impact. The interaction of upgradeable proxy patterns with these permissions can further amplify risk by enabling sudden contract logic changes. Thus, the token rug score’s predictive value depends heavily on the broader ecosystem context, including liquidity depth, governance transparency, and historical permission usage.