Rug Pull on PancakeSwap V2: 20-Week Analysis¶

$569M
Extracted from retail

103,695
Rug pull events

20 weeks
Dataset (2026 W1-W20)

90.1%
V3 detection accuracy

Background¶

Rug pulls are not isolated incidents - they are an industrial-scale operation running continuously on PancakeSwap V2. BNB Chain's low deployment costs (under $5 per contract) and high retail traffic make it the primary venue for systematic token fraud. A single operator can deploy, pump, and exit a new token in hours with minimal capital at risk.

ChainAware analysed PancakeSwap V2 data across 20 consecutive weeks (2026 W1-W20) to quantify the actual scale, identify structural patterns, and validate the V3 detector's accuracy against a live dataset.

The Dataset¶

Platform: PancakeSwap V2 on BNB Smart Chain
Period: 20 weeks, 2026 W1-W20
Events documented: 103,695 confirmed rug pull exits
Total liquidity added by creators: $1.38B
Total liquidity removed by creators: $1.95B
Net extracted from retail holders: $569.4M

The difference between liquidity added ($1.38B) and removed ($1.95B) represents retail funds deposited after pool creation and subsequently extracted - the core mechanism of a liquidity rug.

Key Findings¶

Scale and Continuity¶

The extraction ran every week across the full 20-week window with no meaningful interruption:

Peak week: $53.4M extracted (Week 4)
Lowest week: $12.6M extracted (Week 17)
Average weekly extraction: ~$28.5M

Even at the lowest point, rug pulls on a single DEX extracted over $12M in seven days. This is not opportunistic fraud - it is a continuous, structured operation with professional economics.

Why PancakeSwap V2 Specifically¶

PancakeSwap V2 remains the dominant venue for this activity due to three structural factors:

Sub-$5 deployment cost - a new token contract and pool costs under $5 in BNB gas, making high-volume deployment economically trivial
Retail liquidity concentration - V2 still attracts the largest share of retail-oriented token trading on BNB Chain
Pool creation without friction - anyone can deploy a pool with no vetting, approval, or lock requirements

Industrial Invisibility¶

$569M in losses over 20 weeks receives negligible mainstream media coverage compared to concentrated exchange hacks of similar scale. The distributed nature - thousands of sub-$10,000 individual losses rather than a single large event - produces no single news cycle despite comparable aggregate harm.

V3 Detector Performance¶

ChainAware's Rug Pull Detector V3 was run against the 20-week dataset as a validation exercise. Results:

90.1% prediction accuracy - catching 9 in 10 confirmed rug pulls, often within the first hour of pool launch before any social signal exists.

This represents a 32.5% relative improvement over V2's 68% accuracy, driven by V3's addition of smart contract code inspection alongside the existing deployer wallet behavioural analysis.

Version	Methodology	Accuracy
V2	Deployer wallet behaviour only	68%
V3	Deployer wallet behaviour + contract code inspection	90.1%

What V3 Catches That V2 Missed¶

The gap between 68% and 90.1% is largely accounted for by contracts where the deployer wallet had a clean or thin history but the contract itself contained explicit sell-blocking patterns, hidden mint functions, or asymmetric pause logic. Code inspection catches these regardless of deployer wallet history.

What V3 Still Misses¶

Approximately 9.9% of confirmed rug pulls bypassed detection. These are concentrated among sophisticated operators who:

Maintain a clean deployer wallet history across multiple prior legitimate-appearing deployments
Use obfuscated or copied contract code that passes code inspection
Space their operations across long time intervals to avoid pattern detection

These operations are harder to catch - but also significantly more expensive to engineer than the majority of low-sophistication rug pulls in the dataset.

Implications¶

The 20-week dataset establishes a conservative floor for ongoing PancakeSwap V2 extraction. Following the historical pattern, a subsequent 20-week period could see $250M-$900M in extraction depending on market conditions, with a conservative baseline near $570M.

For individual investors, the practical implication is straightforward: any new PancakeSwap V2 pool is a rug pull candidate until proven otherwise. The volume of confirmed exits (103,695 events across 20 weeks) means the base rate for new pools is overwhelmingly weighted toward fraud, not legitimate projects.

The Rug Pull Detector V3 provides a risk score within 2 seconds of pool creation - at the point when protective information is most valuable.

Products Used¶

Rug Pull Detector V3 - dual-pipeline risk scoring (deployer wallet behavioural analysis + smart contract code inspection)
ChainAware Behavioral Database - 20M+ wallet profiles across 8 blockchains
PancakeSwap V2 on-chain data - 20 weeks of pool creation, liquidity, and exit events

Run a Rug Pull Check → Backtesting & Verification Data →