In April 2023, a token called “SQUID” on the BNB Chain raised over $3 million from retail investors in less than 48 hours. Its website was polished, its social media presence was active, and its price chart showed a steady climb. But when the developers executed a single function call — withdraw() on their liquidity pool contract — every cent of trading liquidity vanished in one block. The token’s price went to zero in seconds. The developers walked away with the funds. Investors never recovered them.

This is a rug pull, and the single most important question you should ask before buying any new token is: is the liquidity locked? If the answer is no, or if you cannot verify it independently, you are sending money to a potential exit scam.

Liquidity locking is the practice of placing the liquidity provider (LP) tokens — which represent the funds deposited into a decentralized exchange pool — into a smart contract that prevents withdrawal for a specified period. A legitimate project locks its liquidity to prove to investors that the team cannot drain the pool. But not all locks are real, and not all real locks are meaningful. Some are too short. Some cover only a fraction of the pool. Some are faked entirely.

This guide walks through exactly how to verify whether a token’s liquidity is genuinely locked, how to read lock contracts, the tools that make this process faster, and the red flags that separate a real lock from a convincing illusion.

BLUF: Before buying any new token, verify that 100% of the liquidity pool’s LP tokens are locked in a verifiable smart contract for a meaningful duration (at least 3–6 months, ideally longer). Check four things: (1) Is the LP token contract the actual pool? — scammers sometimes lock a fake pool; (2) What percentage is locked? — anything below 100% means developers can still drain the unlocked portion; (3) When does the lock expire? — a 24-hour lock is worthless; (4) Is the lock verifiable on-chain? — you must be able to see the LP tokens sitting in the timelock contract yourself, not take a project’s word for it. Use tools like Token Sniffer, GoPlus Security, or the DEX’s own pool page to verify.

What Is Liquidity and Why Does Locking Matter?

When a project launches a token on a decentralized exchange (DEX) like Uniswap, PancakeSwap, or Raydium, it must deposit a pair of assets into a liquidity pool — typically the new token paired with a stablecoin (USDC, USDT) or a major coin (ETH, BNB, SOL). This pool is what enables trading. Without liquidity, no one can buy or sell the token.

When you deposit assets into a liquidity pool, you receive LP tokens in return. These tokens are like a receipt — they represent your share of the pool and can be redeemed for the underlying assets at any time. Whoever holds the LP tokens controls the liquidity. If the project team holds them, they can withdraw all the funds whenever they want.

Here is the critical insight: the LP tokens are the keys to the treasury. If the developer can withdraw them at any moment, the token is a ticking time bomb. A liquidity lock takes those keys away — temporarily — by depositing the LP tokens into a timelock smart contract that rejects withdrawal calls until a specified unlock date.

The Anatomy of a Liquidity Lock

A liquidity lock involves three smart contracts working together:

1. The DEX Pair Contract (e.g., Uniswap V2 Pair)
   - Holds the actual token reserves (e.g., TOKEN + ETH)
   - Issues LP tokens to liquidity providers
   - Anyone holding LP tokens can call removeLiquidity()
     to withdraw the underlying tokens

2. The LP Token (ERC-20)
   - Represents a proportional share of the pool
   - Transferable like any token
   - Balance determines who can withdraw liquidity

3. The Timelock Contract
   - Holds the LP tokens
   - Has a releaseTime / unlockTimestamp
   - Withdrawal function reverts until unlock time is reached
   - After unlock, the beneficiary can claim the LP tokens

When you “check if liquidity is locked,” you are verifying that the LP tokens for the token’s trading pair are sitting inside contract #3, and that the unlock date is far enough in the future to provide real protection.

Step-by-Step: How to Check if Liquidity Is Locked

Step 1: Find the Token’s Liquidity Pool

Start by finding the token contract address. If you’re on a DEX like Uniswap, PancakeSwap, or Trader Joe, the token page usually shows the liquidity pair. If not, use a block explorer (Etherscan, BscScan, Solscan) or a DEX aggregator to find it.

On Etherscan:

  1. Search for the token contract address
  2. Go to the “Token” tab or check the token’s profile on the DEX
  3. Look for the main trading pair (usually the pair with the highest TVL)

The pair contract address is what you need. For Uniswap V2-style DEXes, each pair has its own contract. For Uniswap V3, liquidity is in a non-fungible position (NFT), which changes the locking mechanism (more on this later).

Step 2: Identify the LP Token Supply

On the pair contract’s page in the block explorer:

  1. Find the LP token (it has the same address as the pair contract on Uniswap V2)
  2. Check the total supply of LP tokens
  3. Note this number — it represents 100% of the pool’s liquidity
Example:
  Pair contract: 0xABC...123 (TOKEN/WETH pair on Uniswap V2)
  Total LP token supply: 1,000.00 LP tokens
  
  If 1,000 LP tokens = 100% of the pool,
  then any lock must cover all 1,000 to be fully locked.

Step 3: Check Who Holds the LP Tokens

Go to the LP token’s holder list (the “Holders” tab on the block explorer). You should see one of these patterns:

PatternWhat It MeansRisk Level
100% in a known timelock contractLegitimate lockLow
90-95% in timelock, remainder burnedLegitimate lock + permanent burnVery Low
50-80% in timelock, rest in EOA walletsPartial lock — team can drain unlocked portionHigh
LP tokens in a developer EOA walletNo lock at allCritical
LP tokens sent to dead/burn addressPermanently locked (burned)Very Low
LP tokens in an unknown contractCould be a fake lock or a backdoorInvestigate

The holder list is your first signal. If the majority of LP tokens are in an externally owned account (EOA) — a regular wallet address — there is no lock. The developer can withdraw at any time.

Step 4: Verify the Timelock Contract

If LP tokens are in a contract, you need to verify that the contract is actually a timelock and not a backdoor. This is where many investors get fooled — scammers deploy a contract that looks like a timelock but has a hidden withdrawal function.

Legitimate timelock contracts have these characteristics:

  • A public releaseTime or unlockTimestamp variable you can read
  • A withdraw() or claim() function that checks block.timestamp >= releaseTime
  • No admin override or setReleaseTime() function that lets the owner change the unlock date
  • Verified source code on the block explorer

Red flags in timelock contracts:

  • The contract is not verified (source code hidden)
  • There is a function to change the unlock time (setUnlockTime, updateReleaseTime)
  • There is a withdraw() function callable by the owner without a time check
  • The contract was deployed minutes before the token launch (could be a custom backdoor)
  • The contract has onlyOwner modifiers on critical functions beyond basic admin

To check the source code:

  1. Go to the timelock contract address on the block explorer
  2. Click the “Contract” tab
  3. Check if the source code is verified (green checkmark)
  4. Read the withdrawal function — confirm it requires the unlock time to have passed
  5. Check for any suspicious admin functions

Step 5: Check the Lock Duration

The unlock date matters as much as the lock itself. A 24-hour lock is not a lock — it is a marketing gimmick. Here is a practical risk assessment:

Lock DurationAssessmentRecommendation
Less than 7 daysMeaninglessDo not buy
7–30 daysMarginalVery high risk
1–3 monthsWeakOnly with other strong signals
3–6 monthsAdequateAcceptable for early-stage projects
6–12 monthsGoodStandard for legitimate launches
1–2 yearsStrongHigh confidence
Indefinite (burned)StrongestLP tokens destroyed permanently

Pay attention to whether the lock expires around a major event — token unlock, vesting cliff, or exchange listing. Some projects time their liquidity unlock to coincide with other sell pressure, creating a double dump.

Step 6: Cross-Reference with Lock Verification Tools

Manual checking is thorough but time-consuming. Several tools automate parts of this process:

Token Sniffer (tokensniffer.com): Automatically detects and scores liquidity lock status for Ethereum and BNB Chain tokens. Shows LP token lock percentage, unlock date, and contract audit score. Free to use.

GoPlus Security API: Provides real-time token security data including lp_holders count, lp_total_supply, and whether LP tokens are locked. This is the same data engine used by many DEX aggregators and wallet security plugins. You can use our free token risk check tool to query GoPlus data for any contract.

DEX Tools (dexscreener.com, dextools.io): Shows the liquidity pool page with LP token holder breakdown. DEXTools specifically flags “Locked” liquidity with a lock icon and shows the unlock countdown.

RugCheck (rugcheck.xyz for Solana): Specialized tool for Solana tokens that checks for locked liquidity, mint authority, freeze authority, and other risk factors. Essential for anyone buying Solana tokens.

Pinksale / DxSale lock pages: If the token launched via a presale platform, the lock may be visible on the platform’s lock page. These platforms use standardized timelock contracts that are well-audited. Always verify independently — do not rely solely on the presale platform’s own page.

Common Liquidity Lock Scams

Knowing how to check liquidity locks also means knowing how scammers try to fake them.

Fake Lock Contract

The most common scam. The project deploys a custom contract, transfers LP tokens into it, and claims the liquidity is locked. But the contract has a hidden function that lets the owner withdraw immediately. The block explorer shows LP tokens in a contract, which looks like a lock, but it is actually a trap.

How to spot it: Verify the source code. If the contract is unverified or has suspicious functions, it is not a real lock. Legitimate projects almost always use well-known lock platforms (Team Finance, PinkLock, Unicrypt, Mudra) whose contracts are publicly audited.

Partial Lock

The project locks 50% of the LP tokens and keeps 50% in a team wallet. They advertise “liquidity locked” on their website and social media. When you check the timelock, the lock is real — but it only covers half the pool.

How to spot it: Always check what percentage of LP tokens are locked. The lock page on DEXTools or Token Sniffer shows this. If it is less than 95-100%, the unlocked portion can be drained at any time.

Short Lock with Renewal Promise

The project locks liquidity for 7 days and promises to re-lock it when it expires. After the first lock period, they re-lock for another 7 days, building trust. After several renewals, they stop re-locking and drain the pool.

How to spot it: Treat short locks as no locks. A 7-day lock provides zero real protection. Only count locks that extend months into the future. If a project claims they will re-lock, wait until they actually do before investing.

Burned Then Re-Minted

Some projects “burn” LP tokens by sending them to the dead address (0x000…dEaD). This permanently locks the liquidity because no one can access the dead address. However, if the token contract has a minting function, the developers can mint new tokens to themselves and create new liquidity — effectively creating a parallel pool they control.

How to spot it: Check whether the token contract has a mint() function. If the supply is mutable, burned LP tokens only protect the original pool, not the entire token economy. Use our guide on how to verify a token before buying to check for mint authority.

Uniswap V3 NFT Liquidity

Uniswap V3 uses non-fungible positions — each liquidity position is an NFT, not a fungible LP token. This changes how locking works. A project can lock the NFT position in a timelock, but they can also create multiple positions and only lock one of them. Some projects lock a tiny position while the real liquidity sits in unlocked positions.

How to spot it: Check the NFT holder for the Uniswap V3 position manager contract (0xC364…b5f). Find all positions for the token pair. Verify that the largest positions are locked. This is more complex than V2 and requires careful analysis.

Liquidity Locking on Different Chains

The mechanics of liquidity locking vary by blockchain:

Ethereum and EVM Chains (BNB Chain, Polygon, Arbitrum, Base)

Liquidity is locked using timelock smart contracts. The LP tokens (ERC-20 on Uniswap V2, or ERC-721 NFTs on Uniswap V3) are transferred to the timelock contract. Common lock providers:

  • Unicrypt (UNCX): Long-standing lock platform on Ethereum and BNB Chain
  • PinkLock (Pinksale): Popular on BNB Chain and Polygon
  • Team Finance: Multi-chain lock provider
  • Mudra: BNB Chain-focused lock platform

These platforms use audited, standardized contracts. If a project uses one of these, the lock is likely legitimate. If they use a custom contract, verify it manually.

Solana

Solana does not use LP tokens in the same way EVM chains do. Liquidity is in Raydium or Orca pools, controlled by the pool authority. On Solana, the key risk factors are different:

  • Mint authority: Can the team mint unlimited new tokens?
  • Freeze authority: Can the team freeze your wallet from transacting?
  • LP burn: Has the LP provider’s authority been burned?

Use RugCheck to analyze Solana tokens. If the mint authority is not burned and the freeze authority is still active, the project can rug you regardless of liquidity lock status.

Base

As a Layer 2 on Ethereum, Base inherits EVM mechanics. Uniswap V2 and V3 pools on Base work identically to mainnet. The same tools (Token Sniffer, GoPlus) work for Base tokens. Base’s lower gas costs mean locks are cheaper to set up, but also cheaper for scammers to fake. Apply the same verification steps as Ethereum.

Practical Example: Checking a Token on Etherscan

Let’s walk through a real verification process for a hypothetical token:

Token: ExampleToken (EXT)
Chain: Ethereum
DEX: Uniswap V2
Pair: EXT/WETH
Pair Contract: 0xDEF...789

Step 1: Go to the pair contract on Etherscan
  → Navigate to 0xDEF...789
  → This is also the LP token contract (Uniswap V2 pattern)

Step 2: Check total LP supply
  → Read contract → totalSupply()
  → Result: 500.00 LP tokens

Step 3: Check holders
  → Go to Holders tab
  → 0xAAA...111 (timelock contract): 475 LP tokens (95%)
  → 0xBBB...222 (EOA wallet): 25 LP tokens (5%)
  
  Analysis: 95% locked, 5% unlocked in team wallet
  Risk: The team can drain 5% of the pool immediately

Step 4: Verify the timelock at 0xAAA...111
  → Go to Contract tab → check if verified
  → Read releaseTime() → returns: 2027-01-15
  → Check for admin functions → none found
  → Lock duration: ~18 months from now → Strong

Step 5: Cross-reference with Token Sniffer
  → Search EXT on tokensniffer.com
  → Liquidity lock: 95% locked until Jan 2027
  → Contract score: 75/100 (some centralization concerns)
  
  Verdict: Liquidity is mostly locked with a strong duration,
  but 5% is unlocked. Evaluate whether 5% is acceptable
  based on the pool size and project maturity.

Liquidity Lock Checklist

Before buying any new token, run through this checklist:

  1. Find the pair contract — locate the main liquidity pool for the token
  2. Check LP token holders — where are the LP tokens? In a contract or in an EOA?
  3. Verify the lock contract — is it a legitimate timelock with verified source code?
  4. Check lock percentage — is 100% locked? Anything less is partial protection
  5. Check unlock date — is it far enough out? Minimum 3 months, ideally 6+
  6. Cross-reference tools — verify with Token Sniffer, GoPlus, or DEXTools
  7. Check for mint authority — can the team mint new tokens and create parallel pools?
  8. Check for hidden functions — does the token contract have backdoor withdrawal or pause functions?
  9. Read the lock platform — is it a reputable provider (Unicrypt, PinkLock) or a custom contract?
  10. Check on-chain, not on the website — never trust a “locked” badge on a project website; always verify on the blockchain

What If Liquidity Is Not Locked?

If you discover that a token’s liquidity is not locked, this is not automatically a scam — but it is a critical risk factor. Some legitimate projects have legitimate reasons:

  • Established tokens with deep liquidity (over $1M TVL) may not need locks because the pool is too large to drain profitably
  • Tokens with burned mint authority and decentralized holdings face lower rug risk even without locks
  • Some projects use alternative trust mechanisms like multisig governance or DAO-controlled treasury

However, for any new or low-market-cap token, unlocked liquidity is a dealbreaker. The risk-reward ratio is not favorable. If a project refuses to lock liquidity, they are either incompetent (they don’t understand basic security) or malicious (they intend to rug). Neither is a good investment.

For more on identifying scam tokens and rug pulls, see our guides on how to spot rug pulls and honeypots and ERC-20 token security checks.

Frequently Asked Questions

Q: Can liquidity be “partially locked”? What does that mean?

A: Yes. The project may lock 80% of LP tokens and keep 20% in a team wallet. This means 80% of the pool is protected, but the team can still drain the remaining 20%. Always check the exact percentage — some projects advertise “liquidity locked” while only locking a small fraction.

Q: What happens when the liquidity lock expires?

A: The timelock contract releases the LP tokens to the beneficiary (usually the project team). At that point, they can withdraw the underlying assets from the pool. Legitimate projects re-lock before expiration. Some lock platforms offer auto-relock features. Always check the unlock date and monitor projects approaching their unlock.

Q: Is burning LP tokens better than locking them?

A: Burning LP tokens (sending them to a dead address) is stronger than locking because it is permanent — no one can ever access those funds. However, burned LP tokens cannot be recovered by the team even for legitimate purposes. Locking is more flexible and is the standard for legitimate projects. Both are valid; burning provides maximum investor protection.

Q: Can a locked liquidity pool still be drained?

A: Not through the LP tokens directly, since they are in the timelock. But the token contract itself may have backdoor functions — a transferFrom override, a pause function, or a fee mechanism that sends tokens to the developer. Locking liquidity protects against one specific rug pull vector (draining the pool), not against all scam techniques. Always audit the token contract alongside checking the lock.

Q: How do I check liquidity lock on Solana?

A: Solana uses a different model. Use RugCheck (rugcheck.xyz) to check whether the LP mint authority is burned and whether the token has mint or freeze authority. If the LP tokens are burned and both authorities are revoked, the risk of a liquidity rug pull is very low.

Q: What is a liquidity lock certificate?

A: Some lock platforms (PinkLock, Team Finance) issue a “certificate” — a URL showing the lock details (amount, unlock date, beneficiary). These are useful for quick verification, but always cross-reference with the on-chain data. A certificate from a reputable platform is a strong signal; a screenshot from the project’s website is not.

Key Takeaways

  • Liquidity locking places LP tokens in a timelock contract, preventing the team from draining the pool until a specified unlock date.
  • Always verify on-chain — never trust a “locked” badge on a project website. Use a block explorer to confirm LP tokens are in a timelock contract.
  • Check four things: lock percentage (should be near 100%), lock duration (minimum 3-6 months), lock contract source code (verified, no backdoors), and lock platform reputation (known providers like Unicrypt or PinkLock).
  • Partial locks are partial protection — if 20% of LP tokens are unlocked, the team can drain 20% of the pool at any time.
  • Short locks are marketing gimmicks — a 7-day lock provides no real protection and may be used to build false trust before a rug pull.
  • Beware fake lock contracts — scammers deploy custom contracts that look like timelocks but have hidden withdrawal functions. Only trust verified, audited lock contracts.
  • Different chains have different mechanics — EVM chains use LP token timelocks; Solana relies on mint/freeze authority burns.
  • Locking protects against one vector only — always check the token contract for backdoors, mint functions, and other scam indicators alongside the liquidity lock.

For more on protecting yourself from token scams, see our guides on how to verify a token before buying, DeFi protocol red flags, and how to spot wallet drainers. You can also check any token or address risk in real time using our free address risk scoring tool.