Locked Liquidity and Crypto Rug Pulls: What Insider Withdrawal Authority Can Prove

Crypto rug pull fraud can hide behind a locked liquidity claim when insiders keep the power to withdraw tokens they told buyers they could not touch. The promise concerns who can reach the assets. The evidence concerns who actually could, what they moved and where it went. If you developed the token, worked on the pool or handled the accounts, you may know how the public promise compared with the permissions inside the business.

Locked Liquidity Claims and Insider Withdrawal Permission

When a crypto project claims its liquidity is locked, the question is who still had permission to withdraw it. In its announcement about the criminal case against SafeMoon’s chief executive, the Justice Department described a promise that the pool prevented insiders from removing liquidity, alongside their retained ability to do exactly that. The protection buyers were sold depended on access the insiders said they had given up.

A pool’s paired token deposits supply assets for automated trading, as the government’s technical description in a criminal complaint explains. For someone working on the pool, the assets available for trading and the authority to move those assets are distinct parts of the operation.

SafeMoon promised both that insiders could not withdraw from the pool and that its tokens would serve specified business purposes. One described a restriction on access. The other described a restriction on use. An insider may know which restriction the business actually operated under.

Liquidity Pool Administrator Keys and Employee Evidence

Liquidity pool administrator keys matter in a rug pull inquiry because an employee can connect them to who actually had withdrawal authority. Private keys authorize cryptocurrency transfers, while code privileges and approval arrangements help explain who can exercise control. We work through those arrangements with the person who understands them, connecting the ability to move assets with the decisions to move them.

The Financial Crimes Enforcement Network’s virtual-currency business-model guidance distinguishes control by a hosted-wallet provider, an unhosted-wallet user and the actual key holders in a multisignature arrangement. Those differences determine whose approvals and records matter.

A developer may know which permissions were in use when the public statement was made. A pool operator may know who approved a transfer and which wallet received the assets. An internal correction or escalation can show when someone inside the business recognized the discrepancy. Together, those details connect the power to move tokens with the decision to move them.

What the Public Ledger Leaves Out

A public transaction can show that assets moved without identifying the person who ultimately controlled them or the customer credited inside an exchange. Hosted-wallet transfers between internal accounts need not appear individually on the public blockchain. The exchange ledger and the public ledger therefore answer different parts of the ownership question.

Wallet-control records connect an address to the person or business able to use it. Internal account entries show whose balance received the transfer. Bank messages can connect a movement of cryptocurrency to a movement of dollars, while escalation histories can show what staff understood. We put those records beside the public transfer to explain the transaction in the business’s own terms.

SafeMoon illustrates why that connection matters. In its announcement about that criminal case, the Justice Department described private unhosted wallets, complex transaction routing and pseudonymous centralized-exchange accounts used to conceal proceeds. The employee who knows whose account sat behind an unfamiliar label can add something a wallet diagram alone leaves unresolved. The technical trail becomes much more useful when someone can explain the control behind it.

SafeMoon Sold a Lock While Insiders Kept Access

SafeMoon’s public lock claim contradicted the access its insiders retained. In the Justice Department’s announcement about the criminal case against SafeMoon’s chief executive, insiders used that access to divert tokens for personal benefit. A federal jury convicted the chief executive in May 2025. Buyers were promised a design that kept insiders out, while the people controlling it helped themselves.

SafeMoon’s smart contract imposed a 10% tax on transfers. The company marketed the tax as two 5% portions: one for distributions to existing holders in proportion to their holdings, called reflections, and the other for designated liquidity pools. Holders were promised both more tokens in their wallets and more assets supporting trading. The allocation gave employees a specific use of the tax proceeds to check against what happened inside the project.

According to the Justice Department’s announcement, SafeMoon told investors that the pools would grow automatically through the tax and that the lock would prevent insiders from pulling liquidity out. It also represented that pool tokens would serve limited, predefined business purposes. We see the absurdity: insiders sold buyers protection from themselves while keeping access to the money.

The insiders also promised to add token pairs manually to the liquidity pool when transactions occurred on particular centralized exchanges. For the employee handling those transactions, the exchange activity, the promised pool addition and the actual movement of tokens could show whether the business did what it promised.

The Justice Department’s announcement describes another deception alongside the pool access. Insiders publicly denied holding or trading SafeMoon for themselves, yet repeatedly bought and sold it, sometimes at the market’s height. Someone responsible for wallet records could understand both the movement out of the pool and the holdings behind the public denial.

The Justice Department described a token with a market capitalization of more than $8 billion whose chief executive acquired over $9 million in crypto assets from the scheme. He spent some of the proceeds on vehicles and real estate. Buyers got a promise of restricted access. The executive got spending money.

Goliath Ventures Promised Pool Returns and Paid With Investor Money

Goliath Ventures shows another way a liquidity-pool promise can conceal what a business does with investor money. According to the Justice Department’s account of its chief executive’s plea agreement and other court documents, the company operated a Ponzi scheme while promising monthly returns from cryptocurrency liquidity pools. Investor money primarily paid earlier investors, returned requested principal and funded business events and personal spending. The promised pool earnings were other investors’ money.

The earlier criminal complaint makes the internal display part of that story. An Internal Revenue Service Criminal Investigation agent alleged that investors saw account balances and returns through an online portal, but the displayed performance did not come from the promised pool activity. The affidavit described how the display was made:

For an employee maintaining that portal or reconciling accounts, the source of the displayed return is the useful detail. The complaint also alleged that the chief executive was the sole signatory on Goliath’s Coinbase wallets and directed transfers from them. Together, the display and the wallet authority put the promise and the use of funds inside identifiable business processes. We connect what the customer saw to what the people operating those processes knew.

What an Insider Adds to a Crypto Rug Pull Inquiry

An insider can connect a liquidity promise to code privileges, withdrawal permissions, wallets and the use of funds. That connection becomes stronger when the person can explain the decision behind a transfer and the response to an internal correction. We build the account around those details, so the public statement, the transaction and the business’s knowledge can be understood together.

We examine investment promises and internal control for a possible SEC crypto whistleblower matter, and trading conduct for a possible CFTC crypto whistleblower matter. Which program fits is a judgment we work through with you and crypto fraud whistleblower lawyers.

The Securities and Exchange Commission and Commodity Futures Trading Commission programs offer qualifying whistleblowers awards totaling 10% to 30% of collected monetary sanctions in covered actions with more than $1 million in sanctions. Questions about your own role in the code or transfers are another reason to speak with us about the evidence and the opportunity.

When You Know Who Could Move the Tokens

If you know how a public lock claim differed from the permissions, wallets or approvals inside the project, speak with our whistleblower experts about who could move the tokens. We work beside you to connect the technical control, the investment promise and the money, building your strongest whistleblower case. We bring in crypto fraud whistleblower lawyers who understand token offerings and liquidity-pool conduct, and stay your partners through the process.