Can owner withdraw both coins anytime from liquidity pool? (Rug Pull)

[mirek92]

Hello,
If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,

Thank you for reply

[rat03gopoh]

Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX. Project team/owner can only withdraw their own. A rugpull occurs if the team (which is usually the holder of the most token allocation) sells all those tokens until emptying its crypto pair pool of e.g. BNB.

cmiiw

[vv181]

Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX.

I think that is incorrect, the token contract does not managed by the DEX but instead solely depends on the token creator.

If somebody create liquidity pool of new Token in Pancakeswap ~ without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,

Yes, they can. But remember that just because the owner implements time-lock liquidity, whether they implement it on their own or just third-party services, it doesn't mean that the project is safe from rug pull. There are still a few ways that the owner may inject some loophole within the code.

[mirek92]

Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX. Project team/owner can only withdraw their own. A rugpull occurs if the team (which is usually the holder of the most token allocation) sells all those tokens until emptying its crypto pair pool of e.g. BNB.
cmiiw

So for example. Creator add 1000 of his new token and 100 BNB. People buy some tokens for 20 BNB.

So after that there will be 120 BNB (100 whcih add creator and 20 from traders) and something about 800 new tokens (all from creator). Can owner withdraw all his added tokens or also all his added BNB?
Thank you

[Findingnemo]

Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX. Project team/owner can only withdraw their own. A rugpull occurs if the team (which is usually the holder of the most token allocation) sells all those tokens until emptying its crypto pair pool of e.g. BNB.
cmiiw

So for example. Creator add 1000 of his new token and 100 BNB. People buy some tokens for 20 BNB.

So after that there will be 120 BNB (100 whcih add creator and 20 from traders) and something about 800 new tokens (all from creator). Can owner withdraw all his added tokens or also all his added BNB?
Thank you

I think you're confusing with the staking and trading, if someone bought 200 tokens for 20 BNB the BNB will go to the seller and token wilk go to the buyer wallet so who is in control of the respective wallet can withdraw their funds at anytime so yes if the creator holds 120 BNB and 800 tokens then he can withdraw it but staking pool doesn't work in that way, it is operated via smart contract so the funds will be locked for certain time period and no one can have control the funds at that time.

[Oilacris]

Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX. Project team/owner can only withdraw their own. A rugpull occurs if the team (which is usually the holder of the most token allocation) sells all those tokens until emptying its crypto pair pool of e.g. BNB.
cmiiw

So for example. Creator add 1000 of his new token and 100 BNB. People buy some tokens for 20 BNB.

So after that there will be 120 BNB (100 whcih add creator and 20 from traders) and something about 800 new tokens (all from creator). Can owner withdraw all his added tokens or also all his added BNB?
Thank you

I think you're confusing with the staking and trading, if someone bought 200 tokens for 20 BNB the BNB will go to the seller and token wilk go to the buyer wallet so who is in control of the respective wallet can withdraw their funds at anytime so yes if the creator holds 120 BNB and 800 tokens then he can withdraw it but staking pool doesn't work in that way, it is operated via smart contract so the funds will be locked for certain time period and no one can have control the funds at that time.

Was supposed to say the same thing on which i had been confused on what he said since its not really how it works.Dont make things complicated via trading and staking.

Speaking with Rug pulls then this is usually the token owners have a huge portion or allocation on overall token supply and you can check it out whether its been locked or not for a specific time
because if its not then pretty much sure the risk is higher that owners could anytime make out some rug pull situation unlike into those contracts which had some time locked.

[Kavelj22]

Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX. Project team/owner can only withdraw their own. A rugpull occurs if the team (which is usually the holder of the most token allocation) sells all those tokens until emptying its crypto pair pool of e.g. BNB.
cmiiw

So for example. Creator add 1000 of his new token and 100 BNB. People buy some tokens for 20 BNB.

So after that there will be 120 BNB (100 whcih add creator and 20 from traders) and something about 800 new tokens (all from creator). Can owner withdraw all his added tokens or also all his added BNB?
Thank you

I think you're confusing with the staking and trading, if someone bought 200 tokens for 20 BNB the BNB will go to the seller and token wilk go to the buyer wallet so who is in control of the respective wallet can withdraw their funds at anytime so yes if the creator holds 120 BNB and 800 tokens then he can withdraw it but staking pool doesn't work in that way, it is operated via smart contract so the funds will be locked for certain time period and no one can have control the funds at that time.

Was supposed to say the same thing on which i had been confused on what he said since its not really how it works.Dont make things complicated via trading and staking.

Speaking with Rug pulls then this is usually the token owners have a huge portion or allocation on overall token supply and you can check it out whether its been locked or not for a specific time
because if its not then pretty much sure the risk is higher that owners could anytime make out some rug pull situation unlike into those contracts which had some time locked.

The concept is clear. But, for a simple user, and i want to buy a new listed token, and i trust the pool managed by the Dex, how to check that the token hasn't a time locked in its code? I am not a dev myself and i guess that most users aren't too, so does there a simple way to verify this point?

[Findingnemo]

The concept is clear. But, for a simple user, and i want to buy a new listed token, and i trust the pool managed by the Dex, how to check that the token hasn't a time locked in its code? I am not a dev myself and i guess that most users aren't too, so does there a simple way to verify this point?

Its kind of technical, so you are right its not possible for someone without knowledge can find it out but you can ask the community of public forum by mentioning the name of the project so people can find and what can be the potential returns but these all are just for reference so don't take it as financial advice.

[lobo13hf]

Hello,
If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,

that totally depends on what kind of function that already. There are various function that can be used by evil developer or scammer to take all of liquidity like smartcontract destruction and many more.
In my opinion if lock service will not help it if the owner of contract has been putting a smartcontract destruction function to its smartcontract code that used to issue the token.

Basically, rug pull means for me of the dev was forcing to rob all of liquidity. that's why audit is needed to prevent this critical function to be implemented.

[vv181]

The concept is clear. But, for a simple user, and i want to buy a new listed token, and i trust the pool managed by the Dex, how to check that the token hasn't a time locked in its code? I am not a dev myself and i guess that most users aren't too, so does there a simple way to verify this point?

Its kind of technical, so you are right its not possible for someone without knowledge can find it out but you can ask the community of public forum by mentioning the name of the project so people can find and what can be the potential returns but these all are just for reference so don't take it as financial advice.

I presume if you are finding a brand new token, the community will be extremely small, and at that point of time, asking for community feedback/input will be a hard time to filter which one is the legitimate one or just shilling.

I remember there are some tools that were specifically made to check whether the token has timelock or not, but I didn't save the link. But if I try to search about it, I found: How to see if the liquidity is locked. Though, note that liquidity things aren't merely an indicator of whether the token is good or not.

[cryptoaddictchie]

Hello,
If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,

Thank you for reply

Yes for sure sinxe there is no lock up on the pool he created. Im just confuse actually when someone put a liquidity on that pool, and suddenly the owner rugpull the project, does the liquidity porvider wouls not get his tokens equivalence regarding to the pool since big pile of LP has been removed and its good as loss already since the price would plumetted leaving the LP user more tokens and probably 0 equivalent valuable token.

[malcovi2]

Hello,
If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,

Thank you for reply

Yes for sure sinxe there is no lock up on the pool he created. Im just confuse actually when someone put a liquidity on that pool, and suddenly the owner rugpull the project, does the liquidity porvider wouls not get his tokens equivalence regarding to the pool since big pile of LP has been removed and its good as loss already since the price would plumetted leaving the LP user more tokens and probably 0 equivalent valuable token.

Nope, since the contract would require the equal equivalent of both tokens to withdraw, so the rugpuller gets both the valuable and useless tokens while the liquidity provider gets nothing. Unless if there is a backdoor in the contract that allows the contract creator to withdraw only the valuable tokens and doesnt touch the useless token.

[alexeyneu]

looks like nobody here knows the answer. yeas they can do this unless lp tokens on time-lock.
https://hackernoon.com/why-locking-liquidity-is-important-for-cryptocurrency-qv4d37hd