r来自普通用户的行为。

欧普推广渠道

behavior from normal user behavior, thereby improving the deceptiveness of the scam.

行为与正常用户行为不同，从而提高诈骗的欺骗性。

In addition, we also found that the infrastructure addresses used by the Rug Pull gang are not limited to the above two addresses. There are also some infrastructure addresses that are used less frequently and are not included in the above statistics. These infrastructure addresses are mainly used to cash out the proceeds of Rug Pull scams through centralized exchanges or flash exchange platforms.output: Web3 scams are rampant

此外，我们还发现Rug Pull团伙使用的基础设施地址并不局限于上述两个地址。还有一些基础设施地址使用频率较低，未包含在上述统计中。这些基础设施地址主要用于通过中心化交易所或闪兑平台套现Rug Pull诈骗收益。输出：Web3诈骗猖獗

In the Web3 world, new tokens are constantly emerging. Have you ever wondered how many new tokens are issued every day? Are these new tokens safe?

在Web3世界中，新的代币不断涌现。您有没有想过每天会发行多少新代币？这些新代币安全吗？

These questions are not without purpose. In the past few months, the CertiK security team has captured a large number of Rug Pull transaction cases. It is worth noting that the tokens involved in these cases are all new tokens that have just been listed on the chain.

这些问题并非没有目的。在过去的几个月里，CertiK安全团队捕获了大量的Rug Pull交易案例。值得注意的是，这些案件涉及的代币均为刚刚上链的新代币。

Subsequently, CertiK conducted an in-depth investigation of these Rug Pull cases and found that there were organized criminal gangs behind them, and summarized the pattern characteristics of these scams. Through in-depth analysis of the modus operandi of these gangs, CertiK discovered a possible fraud promotion channel for Rug Pull gangs: Telegram groups. These gangs used the "New Token Tracer" function in groups such as Banana Gun and Unibot to attract users to buy fraudulent tokens and ultimately make profits through Rug Pull.

随后，CertiK对这些Rug Pull案件进行了深入调查，发现其背后存在有组织的犯罪团伙，并总结了这些骗局的模式特征。通过深入分析这些团伙的作案手法，CertiK发现了Rug Pull团伙可能的诈骗推广渠道：Telegram群。这些团伙利用Banana Gun、Unibot等团伙中的“New Token Tracer”功能，吸引用户购买欺诈代币，最终通过Rug Pull获利。

CertiK counted the token push information of these Telegram groups from November 2023 to early August 2024, and found that a total of 93,930 new tokens were pushed, of which 46,526 involved Rug Pull tokens, accounting for as high as 49.53%. According to statistics, the cumulative investment cost of the gang behind these Rug Pull tokens was 149,813.72 ETH, and they made a profit of 282,699.96 ETH with a return rate of up to 188.7%, equivalent to about US$800 million.

CertiK统计了2023年11月至2024年8月上旬这些Telegram群的代币推送信息，发现共推送了93,930个新代币，其中46,526个涉及Rug Pull代币，占比高达49.53%。据统计，这些Rug Pull代币背后的团伙累计投资成本为149,813.72 ETH，获利282,699.96 ETH，回报率高达188.7%，相当于约8亿美元。

To assess the percentage of new tokens pushed by Telegram groups on the Ethereum mainnet, CertiK counted the new tokens issued on the Ethereum mainnet during the same time period. The data shows that a total of 100,260 new tokens were issued during this period, of which 89.99% were pushed through Telegram groups. On average, about 370 new tokens were born every day, far exceeding reasonable expectations. After continuous and in-depth investigation, we found the truth that was disturbing - at least 48,265 of them were involved in Rug Pull scams, accounting for as high as 48.14%. In other words, almost one in every two new tokens on the Ethereum mainnet is involved in a scam.

为了评估 Telegram 群组在以太坊主网上推送的新代币的百分比，CertiK 统计了同一时间段内以太坊主网上发行的新代币。数据显示，这一时期共发行了100,260个新代币，其中89.99%是通过Telegram群推送的。平均每天约有370个新代币诞生，远远超出合理预期。经过持续深入的调查，我们发现了令人不安的真相——其中至少有48,265人参与了Rug Pull诈骗，占比高达48.14%。换句话说，以太坊主网上几乎每两个新代币中就有一个涉及骗局。

In addition, CertiK has found more Rug Pull cases in other blockchain networks. This means that the security situation of not only the Ethereum mainnet, but also the entire Web3 new token ecosystem is far more severe than expected. Therefore, CertiK wrote this research report, hoping to help all Web3 members raise their awareness of prevention, stay vigilant in the face of endless scams, and take necessary precautions in time to protect their assets.

此外，CertiK还在其他区块链网络中发现了更多Rug Pull案例。这意味着，不仅是以太坊主网，整个Web3新通证生态的安全形势也远比预想的要严峻。因此，CertiK撰写了这份研究报告，希望能够帮助所有Web3会员提高防范意识，面对层出不穷的骗局保持警惕，及时采取必要的预防措施，保护自己的资产。

ERC-20 Token

ERC-20代币

Before we officially start this report, let's first understand some basic concepts.

在正式开始本报告之前，我们先来了解一些基本概念。

ERC-20 tokens are one of the most common token standards on the blockchain today. They define a set of specifications that allow tokens to interoperate between different smart contracts and decentralized applications (dApps). The ERC-20 standard specifies the basic functions of tokens, such as transfers, balance inquiries, and authorization of third parties to manage tokens. Thanks to this standardized protocol, developers can more easily issue and manage tokens, thus simplifying the creation and use of tokens. In fact, any individual or organization can issue their own tokens based on the ERC-20 standard and raise start-up funds for various financial projects through pre-sale tokens. Because of the widespread use of ERC-20 tokens, it has become the basis for many ICOs and decentralized financial projects.

ERC-20 代币是当今区块链上最常见的代币标准之一。他们定义了一组规范，允许代币在不同的智能合约和去中心化应用程序（dApp）之间进行互操作。 ERC-20标准规定了代币的基本功能，如转账、余额查询、授权第三方管理代币等。得益于这种标准化协议，开发者可以更轻松地发行和管理代币，从而简化代币的创建和使用。事实上，任何个人或组织都可以基于ERC-20标准发行自己的代币，并通过预售代币筹集各种金融项目的启动资金。由于ERC-20代币的广泛使用，它已成为许多ICO和去中心化金融项目的基础。

USDT, PEPE, and DOGE, which we are familiar with, are all ERC-20 tokens, and users can buy these tokens through decentralized exchanges. However, some fraud gangs may also issue malicious ERC-20 tokens with code backdoors, list them on decentralized exchanges, and then induce users to buy them.

我们熟悉的USDT、PEPE、DOGE都是ERC-20代币，用户可以通过去中心化交易所购买这些代币。不过，一些诈骗团伙也可能发行带有代码后门的恶意ERC-20代币，在去中心化交易所上市，然后诱导用户购买。

Typical scam cases of Rug Pull tokens

Rug Pull 代币典型诈骗案例

Here, we use a Rug Pull token scam case to gain a deeper understanding of the operation mode of malicious token scams. First of all, it should be noted that Rug Pull refers to a fraudulent act in which a project party suddenly withdraws funds or abandons a project in a decentralized financial project, causing investors to suffer huge losses. Rug Pull tokens are tokens issued specifically for the purpose of implementing such fraudulent acts.

在这里，我们通过一个Rug Pull代币诈骗案例来更深入地了解恶意代币诈骗的运作模式。首先需要说明的是，Rug Pull是指去中心化金融项目中项目方突然撤资或放弃项目，导致投资者遭受巨大损失的欺诈行为。 Rug Pull 代币是专门为实施此类欺诈行为而发行的代币。

The Rug Pull tokens mentioned in this article are sometimes also

本文中提到的 Rug Pull 代币有时也是