2014/05/01 — Legal & Compliance Desk
Two crypto projects collapse the same week. In the first, the development team uses a hidden contract function to drain the liquidity pool they created and disappear with $40 million in depositor funds. In the second, a coordinated network of accounts drives a token's price from $0.01 to $2.00 over 72 hours, generates $15 million in trading volume for outside buyers, then executes a synchronized sell, crashing the price back toward zero. The victims look similar from the outside. The legal analysis is different, the defendants are different, and the available enforcement tools differ significantly.
Regulators and prosecutors are getting more precise about these distinctions, and those distinctions determine who gets charged, under what theory, and what outcomes are realistically achievable for victims.
A rug pull, in its core form, involves developers or a controlling team creating a crypto project, attracting investment or liquidity deposits, and then removing the value through contract functionality they retained, leaving token holders with worthless assets. The colloquial definition is clean. The legal translation requires picking which doctrine best applies, and that choice depends on how the token was characterized and marketed.
Rug pull vs pump and dump requires separate legal frameworks because the parties bearing primary liability differ. In a rug pull, the developers who built the project and retained control of the liquidity are the primary defendants. In a pump and dump scheme, the organizers of the coordinated buying and selling campaign are the defendants, and the project's actual developers may themselves be victims of a manipulation scheme operating against their token.
In the US, the SEC has pursued rug pulls where the token qualifies as a security under the Howey test, bringing securities fraud claims under Section 10(b) and Rule 10b-5 of the Securities Exchange Act. The CFTC has brought manipulation and fraud claims in cases where tokens are characterized as commodities. Federal prosecutors have pursued wire fraud and money laundering charges as alternative or parallel theories. The chosen theory matters because it determines what evidence is necessary, which agency leads the investigation, and what civil remedies are available for victims.
Pump and dump schemes have clearer legal precedent than rug pulls because they map directly onto securities manipulation doctrine that predates cryptocurrency by decades. The elements of the offense are: coordinated buying activity designed to drive prices artificially higher, promotion to attract outside buyers and amplify the price increase, and coordinated selling by the original scheme operators at the artificially inflated price.
In traditional securities markets, this is prohibited under Sections 9 and 10(b) of the Securities Exchange Act of 1934, and the DOJ has decades of case law to draw from. Pump and dump rules in crypto are more contested: if a token isn't a security, the securities manipulation framework doesn't apply directly. The CFTC has asserted jurisdiction over manipulation in crypto commodity markets. The EU's Market Abuse Regulation has been applied to crypto assets in some member states. The jurisdictional map is still being drawn, but the direction is clearly toward greater application of existing manipulation law.
Coordinated pump and dump activity in crypto leaves a characteristic on-chain footprint: synchronized buying patterns across related wallet addresses, sudden trading volume concentration from previously inactive wallets, and timing patterns that align with external promotion campaigns. Blockchain analytics firms have become standard tools in these investigations, allowing prosecutors to reconstruct the coordination from the public transaction record.
SEC crypto enforcement activity has increased substantially since 2022. The FTX collapse and resulting criminal convictions, though technically a misappropriation and fraud case rather than a rug pull or pump and dump, demonstrated that prosecutors can successfully prosecute complex crypto cases and that juries can understand blockchain-based evidence when presented well. That demonstration effect matters for subsequent enforcement.
International enforcement cooperation is developing faster than critics expected. DOJ, FCA, and European regulators have coordinated on several cross-border crypto fraud cases, with asset freezing and evidence-sharing that would have been impractical five years ago. The pseudonymity of crypto doesn't protect against analysis that links wallet addresses to real identities through KYC records held by regulated exchanges, IP address logs, and on-chain activity patterns that connect to identifiable real-world behavior.
Liability for secondary participants is an emerging enforcement focus. Exchange listings that gave market access and credibility to tokens subsequently revealed as rug pulls, influencers who promoted tokens they held without disclosing their positions, and early investors who sold into coordinated pumps are all facing or have faced legal scrutiny in various jurisdictions. The idea that only the primary operators bear liability is being tested.
Crypto scam recovery after a rug pull or pump and dump is difficult but not impossible in all cases. If significant funds are traceable on-chain and operators can be identified before assets are fully dispersed, civil recovery through coordinated legal action is possible. Several law firms now specialize in exactly this. Success rates depend heavily on how quickly the operation is identified and whether the operators had any connection to regulated entities with KYC records.
Reporting to enforcement agencies creates the record that feeds into broader investigations. Individual cases that don't meet prosecution thresholds on their own may contribute to pattern evidence that supports larger actions with victim restitution components.
The legal frameworks for rug pulls and pump and dump schemes are still being built case by case. What's already clear is that “it's crypto” stopped being a functional defense around 2022, and the technical capability to reconstruct these schemes from blockchain evidence is making it harder for operators to disappear cleanly. The enforcement trend is clearly toward more cases, larger penalties, and broader liability. Investors and platform operators who have not built fraud scheme detection into their compliance programs are accumulating exposure in a regulatory environment that is moving decisively against them.