A rug pull of the type where developers steal valuable coins by minting unlimited numbers of valueless new couns on a DeFi platform is only possible if the liquidity is not locked into a smart contract. There probably are other attack vectors and mitigations to them.
This is a young industry where the industry standards are evolving.
Posted Using LeoFinance Beta