What a Liquidity Lock Actually Means (and How to Verify One On-Chain)
"Liquidity locked" is one of the most repeated lines in new token launches, and one of the least checked. A lock can be real protection, or it can be a screenshot, a short timer, or a contract the team can still unlock.
"Liquidity locked" is one of the most repeated lines in new token launches, and one of the least checked. A lock can be real protection, or it can be a screenshot, a short timer, or a contract the team can still unlock. Here's what a lock actually is and how to verify one yourself before you trust it.
How liquidity works on a DEX
When a token launches on an automated market maker like Uniswap, Raydium or PancakeSwap, someone deposits the token plus a paired asset (ETH, SOL, BNB or a stablecoin) into a pool. Traders swap against that pool.
On Uniswap V2-style pools, the depositor gets LP tokens back. Those LP tokens are a claim on the pool. Whoever holds them can redeem them and withdraw their share of both assets.
That's the core risk: if the deployer holds the LP tokens, they can pull the paired asset out of the pool at any time. The token's price collapses because there's nothing left to sell into. That's a liquidity rug.
What "locked" and "burned" mean
There are two common ways to take that power away from the team:
- Burned: the LP tokens are sent to an address nobody controls, like the zero address or a dead address. Nobody can ever redeem them, so that liquidity stays in the pool permanently.
- Locked: the LP tokens are deposited into a time-lock contract (a locker). They can't be withdrawn until a set unlock date, and then they go back to whoever locked them.
Burned is permanent. Locked is temporary, and only as safe as the locker contract and the unlock date.
How to verify a lock yourself
1. Find the pool and its LP token
Look up the token on a block explorer (Etherscan, Basescan, BscScan, Solscan) or a DEX screener and find its main trading pair. On V2-style pools, the pair contract address is also the LP token address.
2. Check who holds the LP tokens
Open the LP token's Holders tab. You want most of the supply sitting in one of these:
- the zero address or a dead address (burned)
- a known locker contract (locked)
If a regular wallet, especially the deployer's, holds most of the LP supply, the liquidity isn't locked, whatever the website says.
3. Read the lock terms
If the LP tokens are in a locker, open that lock and check:
- Unlock date. A lock that expires next week protects you for a week.
- Share of liquidity locked. Locking a small slice while the deployer keeps the rest doesn't help much.
- Who can withdraw at unlock, and whether the lock can be extended, transferred or split.
4. Check the locker itself
A "lock" in an unverified contract written by the same team isn't a lock you can trust. Use well-known locker contracts with verified source code, and confirm the address you're looking at is the real one rather than a lookalike.
5. Watch for concentrated-liquidity pools
On Uniswap V3-style pools, liquidity positions are NFTs instead of fungible LP tokens. The same idea applies: find who holds the position NFT, and whether it's held by a locker or still sits in the deployer's wallet.
6. Remember a lock isn't the whole picture
Locked liquidity stops one kind of rug. It doesn't stop:
- a contract that blocks selling (a honeypot)
- the owner minting new supply and dumping it into the pool
- sell taxes the owner can raise at any time
- a few wallets holding most of the supply and selling together
A token with locked liquidity and a malicious contract is still a trap.
Quick checklist
Before trusting a "liquidity locked" claim:
- Find the pool and its LP token or position NFT.
- Confirm most of it is burned or in a known, verified locker.
- Check the unlock date and the share that's locked.
- Then check everything else: whether you can sell, the taxes, owner powers and holder concentration.
Scan first, ape second
I'm building Rugtective so you don't have to do all of this by hand. Paste a token's contract address and get one verdict, AVOID, CAUTION or CLEAR, in seconds, with the on-chain evidence behind every call, including whether there's liquidity the team can pull. It's coming in the first half of 2027 on Solana, Ethereum, Base, BNB Chain and Robinhood Chain, on the web, iPhone, Android and as a Chrome extension.
Join the early access waitlist: https://rugtective.com
This article is for education only and isn't financial advice.
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.