looks like nobody here knows the answer. yeas they can do this unless lp tokens on time-lock.
https://hackernoon.com/why-locking-liquidity-is-important-for-cryptocurrency-qv4d37hd
Topic: Can owner withdraw both coins anytime from liquidity pool? (Rug Pull) (Read 131 times)
April 15, 2022, 06:51:35 AM
April 15, 2022, 06:44:44 AM
Hello,
If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,
Thank you for reply
Yes for sure sinxe there is no lock up on the pool he created. Im just confuse actually when someone put a liquidity on that pool, and suddenly the owner rugpull the project, does the liquidity porvider wouls not get his tokens equivalence regarding to the pool since big pile of LP has been removed and its good as loss already since the price would plumetted leaving the LP user more tokens and probably 0 equivalent valuable token.If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,
Thank you for reply
Nope, since the contract would require the equal equivalent of both tokens to withdraw, so the rugpuller gets both the valuable and useless tokens while the liquidity provider gets nothing. Unless if there is a backdoor in the contract that allows the contract creator to withdraw only the valuable tokens and doesnt touch the useless token.
April 03, 2022, 11:44:53 PM
Hello,
If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,
Thank you for reply
Yes for sure sinxe there is no lock up on the pool he created. Im just confuse actually when someone put a liquidity on that pool, and suddenly the owner rugpull the project, does the liquidity porvider wouls not get his tokens equivalence regarding to the pool since big pile of LP has been removed and its good as loss already since the price would plumetted leaving the LP user more tokens and probably 0 equivalent valuable token. If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,
Thank you for reply
April 03, 2022, 12:41:40 PM
The concept is clear. But, for a simple user, and i want to buy a new listed token, and i trust the pool managed by the Dex, how to check that the token hasn't a time locked in its code? I am not a dev myself and i guess that most users aren't too, so does there a simple way to verify this point?
I remember there are some tools that were specifically made to check whether the token has timelock or not, but I didn't save the link. But if I try to search about it, I found: How to see if the liquidity is locked. Though, note that liquidity things aren't merely an indicator of whether the token is good or not.
April 03, 2022, 11:48:03 AM
Hello,
If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,
that totally depends on what kind of function that already. There are various function that can be used by evil developer or scammer to take all of liquidity like smartcontract destruction and many more. If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,
In my opinion if lock service will not help it if the owner of contract has been putting a smartcontract destruction function to its smartcontract code that used to issue the token.
Basically, rug pull means for me of the dev was forcing to rob all of liquidity. that's why audit is needed to prevent this critical function to be implemented.
April 03, 2022, 01:44:51 AM
The concept is clear. But, for a simple user, and i want to buy a new listed token, and i trust the pool managed by the Dex, how to check that the token hasn't a time locked in its code? I am not a dev myself and i guess that most users aren't too, so does there a simple way to verify this point?
April 02, 2022, 05:42:22 PM
Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX. Project team/owner can only withdraw their own. A rugpull occurs if the team (which is usually the holder of the most token allocation) sells all those tokens until emptying its crypto pair pool of e.g. BNB.
cmiiw
cmiiw
So for example. Creator add 1000 of his new token and 100 BNB. People buy some tokens for 20 BNB.
So after that there will be 120 BNB (100 whcih add creator and 20 from traders) and something about 800 new tokens (all from creator). Can owner withdraw all his added tokens or also all his added BNB?
Thank you
Speaking with Rug pulls then this is usually the token owners have a huge portion or allocation on overall token supply and you can check it out whether its been locked or not for a specific time
because if its not then pretty much sure the risk is higher that owners could anytime make out some rug pull situation unlike into those contracts which had some time locked.
The concept is clear. But, for a simple user, and i want to buy a new listed token, and i trust the pool managed by the Dex, how to check that the token hasn't a time locked in its code? I am not a dev myself and i guess that most users aren't too, so does there a simple way to verify this point?
April 02, 2022, 05:21:28 PM
Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX. Project team/owner can only withdraw their own. A rugpull occurs if the team (which is usually the holder of the most token allocation) sells all those tokens until emptying its crypto pair pool of e.g. BNB.
cmiiw
cmiiw
So for example. Creator add 1000 of his new token and 100 BNB. People buy some tokens for 20 BNB.
So after that there will be 120 BNB (100 whcih add creator and 20 from traders) and something about 800 new tokens (all from creator). Can owner withdraw all his added tokens or also all his added BNB?
Thank you
Speaking with Rug pulls then this is usually the token owners have a huge portion or allocation on overall token supply and you can check it out whether its been locked or not for a specific time
because if its not then pretty much sure the risk is higher that owners could anytime make out some rug pull situation unlike into those contracts which had some time locked.
April 02, 2022, 11:39:19 AM
Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX. Project team/owner can only withdraw their own. A rugpull occurs if the team (which is usually the holder of the most token allocation) sells all those tokens until emptying its crypto pair pool of e.g. BNB.
cmiiw
cmiiw
So for example. Creator add 1000 of his new token and 100 BNB. People buy some tokens for 20 BNB.
So after that there will be 120 BNB (100 whcih add creator and 20 from traders) and something about 800 new tokens (all from creator). Can owner withdraw all his added tokens or also all his added BNB?
Thank you
April 02, 2022, 10:31:14 AM
Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX. Project team/owner can only withdraw their own. A rugpull occurs if the team (which is usually the holder of the most token allocation) sells all those tokens until emptying its crypto pair pool of e.g. BNB.
cmiiw
cmiiw
So for example. Creator add 1000 of his new token and 100 BNB. People buy some tokens for 20 BNB.
So after that there will be 120 BNB (100 whcih add creator and 20 from traders) and something about 800 new tokens (all from creator). Can owner withdraw all his added tokens or also all his added BNB?
Thank you
April 02, 2022, 09:29:53 AM
Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX.
I think that is incorrect, the token contract does not managed by the DEX but instead solely depends on the token creator.If somebody create liquidity pool of new Token in Pancakeswap ~ without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,
Yes, they can. But remember that just because the owner implements time-lock liquidity, whether they implement it on their own or just third-party services, it doesn't mean that the project is safe from rug pull. There are still a few ways that the owner may inject some loophole within the code. 
April 02, 2022, 07:02:33 AM
Nope, because pool liquidity is only facilitated by DEX itself which means pool address private keys are secured by DEX. Project team/owner can only withdraw their own. A rugpull occurs if the team (which is usually the holder of the most token allocation) sells all those tokens until emptying its crypto pair pool of e.g. BNB.
cmiiw
cmiiw
April 02, 2022, 03:34:04 AM
Hello,
If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,
Thank you for reply
If somebody create liquidity pool of new Token in Pancakeswap simply like there: https://www.youtube.com/watch?v=3d-KwvPJDTA
without any lock service, does it means that owner can withdraw all deposited tokens or all tokens anytime,
Thank you for reply
Jump to: