Liquidity Drain
SecurityA liquidity drain is the sudden removal of the token reserves backing a DEX trading pool. Because a token is only sellable against its pool's reserves, draining them strands every holder. It is the mechanism behind most rug pulls, and it confirms in a single block.
A liquidity drain is the sudden removal of the token reserves backing a DEX trading pool. Because a token is only sellable against its pool’s reserves, draining them strands every holder. It is the mechanism behind most rug pulls, and it confirms in a single block.
When a liquidity provider withdraws from an automated market maker pool, both token reserves leave together. Unlike a swap, which moves one reserve up and the other down and leaves the pool’s total dollar value almost unchanged, a drain drops that total by the full amount withdrawn. That difference is what makes a drain detectable: in net-USD terms, swaps cancel out and withdrawals do not.
Drains are not always malicious. Legitimate providers exit positions and protocols migrate liquidity between pools. A drain becomes a rug pull when a token’s creator removes the reserves they seeded, leaving buyers holding a token with nothing to sell it into. Chainalysis tracked $94.8 million in rug-pull losses in 2024, and roughly 94% of suspect pools were drained by the same address that created them.
Because a drain is one transaction confirmed in one block, catching it as it happens requires watching pool reserves in real time rather than polling on a schedule. DexPaprika streams per-block reserve changes with USD values attached over a free, keyless feed.