BNB Chain Rug Pull Checker

Quick Answer

BNB Chain has the highest rug pull count of any chain — driven by near-zero deployment costs (under $5 to launch a token + pool) and a large retail user base. Most BSC rugs use one of three patterns: honeypot contract, unlocked PancakeSwap LP, or migrator backdoor in a forked MasterChef/yield farm.
The migrator rug is BSC-specific: a MasterChef fork with a setMigrator() function allows the deployer to drain all staked LP tokens from every pool in a single transaction — stealing every depositor's principal simultaneously.
CertiK documented BSC as the chain with the most rug pull incidents in 2022 and 2023. Free scan, results in 60 seconds.

Free · Instant · No sign-up

Check Any Token Address

Honeypot detection · LP lock · Mint authority · Sell tax

BSC Rug Pull Signals

Signal	Risk	Description	Example
BSC Honeypot (PancakeSwap)	Critical	BSC honeypots follow the same pattern as Ethereum but are more common due to near-zero deployment costs. The contract allows buys through PancakeSwap but reverts or charges 100% tax on sells. BSC's low gas means thousands of new honeypots deploy daily.	A BSC memecoin that processes buy transactions normally but includes `require(tx.origin == _devWallet)` in the sell path — only the dev wallet can sell, all other sell attempts revert.
PancakeSwap LP Not Locked	Critical	LP tokens from PancakeSwap's liquidity pool are held by the deployer. PancakeSwap V2 and V3 LP tokens are standard ERC-20 tokens on BSC — the holder can call removeLiquidity() at any time. BSC's lower gas costs make the LP removal faster and cheaper than on Ethereum.	The BALD rug on Base (Aug 2023, $23M) followed the same LP removal pattern. BSC equivalent: any unlocked LP token held by deployer can be removed in a single transaction.
Fork Clone Backdoor	Critical	The most common BSC rug pattern: copy Uniswap or PancakeSwap contract code, add a hidden migrator() or setMinter() function that allows moving all LP tokens or minting tokens. The original Sushi Swap migrator controversy spawned hundreds of BSC clone backdoors.	A BSC yield farm forked from SushiSwap adds a `migrate(address newAddress)` function callable by the deployer — this function moves all staked LP tokens to an attacker-controlled address.
Migrator Function	High	A migrator() function in a staking or yield farm contract allows the contract owner to move all deposited LP tokens to an arbitrary address in a single call. This is the standard SushiSwap-era clone rug mechanism and is still deployed on BSC frequently.	MasterChef fork on BSC with setMigrator(address _migrator) — deployer deploys a malicious migrator contract, calls setMigrator(), then calls migrate() on each pool, draining all staked LP tokens to their wallet.
Anti-Bot Mechanism Rug	High	Many BSC tokens launch with 'anti-bot' features — max transaction limits, trading cooldowns, blacklists — marketed as security features. These same features can be used as rug mechanisms: block all sells while team dumps, or blacklist all holders before draining liquidity.	BSC token launches with 'anti-bot' blacklist. Team adds 5,000 buyer addresses to the blacklist post-launch, freezing all their tokens. Team removes liquidity from the now-one-sided pool.
No Source Code Verification	Medium	BSC contracts that are not verified on BSCScan cannot be audited. Given that BSC deploys hundreds of scam tokens per day, unverified contracts should be treated as high-risk by default. BSCScan verification is free and instant — there is no legitimate reason for a project contract to remain unverified.	A BSC token with 10,000 holders but no verified source code on BSCScan. Without source, you cannot check for honeypot patterns, mint functions, blacklist capabilities, or migrator functions.

BSC Rug Pull Checker — FAQs

Why does BNB Chain have more rug pulls than Ethereum?

BSC has a dramatically higher rug pull rate per deployed token for three structural reasons: (1) Near-zero deployment costs — creating a BEP-20 token and adding liquidity on PancakeSwap costs under $5 in BNB, vs $50–500+ on Ethereum depending on gas. This lowers the barrier for opportunistic scammers; (2) Large retail user base — BSC attracted a large retail DeFi audience with its low fees, and retail users are statistically more likely to invest in unaudited tokens; (3) Clone-culture — BSC's ecosystem is built heavily on forked code, and forked contracts with hidden modifications are the primary rug vector. The result: CertiK's 2023 data shows BSC as the chain with the most documented rug pulls and exit scams by count.

What is a BSC migrator rug and how does it work?

The migrator rug is specific to BSC yield farms and staking contracts forked from SushiSwap's MasterChef pattern. The original SushiSwap code included a migrator() function that allowed the protocol to move all LP tokens to a new version of the contract — a legitimate feature for protocol upgrades. BSC clones copied this code, often with no timelock or governance protection on the migrator. The rug: (1) Deploy a MasterChef fork with a setMigrator() function; (2) Market the yield farm, attract deposits; (3) Deploy a malicious migrator contract that sends LP tokens to the dev wallet; (4) Call setMigrator(maliciousContract); (5) Call migrate() on all pools — every depositor's LP token is stolen in a single transaction.

How do I check if a PancakeSwap liquidity pool is safe?

Steps: (1) Find the LP token address — on BSCScan, go to the token contract → Token Holders → look for the PancakeSwap V2 Pair address; (2) Check LP token holders — the top holders of the LP token should be a locker (not the deployer); (3) Verify on Mudra Locker, Pink Lock, or Unicrypt — BSC-native locker solutions — that the LP tokens are locked for at least 6 months; (4) Check when the lock expires — a 30-day lock is a yellow flag, a 1-year lock is more credible; (5) Check the deployer wallet's BNB and BEP-20 token history — deployers who have previously rugged other tokens are high-risk regardless of lock status.

What is the BSCScan tool for detecting rug pulls?

BSCScan doesn't have a built-in rug pull detector, but its contract analysis tools provide the raw data: (1) Contract tab — check if source code is verified and read all functions, especially onlyOwner ones; (2) Token Holders tab — see if the deployer holds a disproportionate supply percentage; (3) Token Transfers tab — watch for large deployer sell transactions (soft rug in progress); (4) BEP-20 Token Approval Checker — see what contracts have approval to spend tokens from your wallet. Third-party tools (TokenSniffer, BSCheck, PooCoin's audit feature) add automated honeypot simulation on top of BSCScan data.

Is the BSC rug pull checker free?

Yes. SmartContractAuditor.ai's contract analyzer is free for the first scan — paste any BEP-20 contract address for instant analysis of honeypot patterns, admin function enumeration, and rug pull signal detection. BSC contract analysis covers the same vulnerability classes as Ethereum (same Solidity language, EVM-compatible) plus BSC-specific patterns: migrator functions, PancakeSwap-specific LP interactions, and the common fork-and-modify backdoor patterns prevalent in BSC clone projects.

Written by Duron Epps, Founder of SmartContractAuditor.ai · Last updated July 2026

Rug Pull Checker Hub·Ethereum Rug Pull Checker·BNB Chain Audit·DeFi Hacks Database