According to the study, in many rug pull cases, the theft occurs exclusively on-chain: “The scam is encoded in the token’s smart contract, the token is traded on a decentralized exchange, and the scammer’s illicit profits are denominated in crypto, not fiat currency.”