Advertisement
Free Guide

How to Check If a Token Is a Honeypot

A honeypot token lets you buy in but blocks you from selling, trapping your money in the contract. Here is exactly how honeypot scams work, the warning signs to watch for, and how to check any token for honeypot risk in seconds - completely free.

Advertisement

What Is a Honeypot Token?

A honeypot token is a cryptocurrency smart contract designed so that anyone can buy the token, but only the developer's own wallets (or a short allow-list of "approved" addresses) can sell it. Everyone else who buys in gets stuck holding a token they cannot convert back into ETH, BNB, SOL or any other currency. The price often keeps climbing as more people buy - which makes the token look like a great opportunity right up until buyers try to cash out and discover the sell function silently fails, reverts, or takes a 99% tax.

Honeypots are one of the most common crypto scams on new, low-liquidity tokens across every chain, including Ethereum, BNB Chain (BSC), Base, Solana and Polygon. Because the scam is built directly into the contract code, it is invisible to the naked eye - you cannot tell a token is a honeypot just by looking at its chart or its website. You need to actually test the contract's buy and sell logic, which is exactly what a honeypot checker like the one on this page does automatically.

How Honeypot Scams Work

Most honeypot contracts use one or more of the following tricks, hidden inside otherwise normal-looking token code:

  • Sell function blacklist - the contract checks the seller's wallet address against a hidden blacklist and blocks the transaction if you are not the owner.
  • Extreme or hidden sell tax - the contract quietly charges a 90-100% tax on sells, so technically you "can" sell, but you receive almost nothing back.
  • Pausable trading - an owner-only function can pause all trading at any time, freezing your tokens indefinitely.
  • Fake liquidity - liquidity looks locked or healthy on the surface, but the owner retains a backdoor function to drain the pool instantly.
  • Max transaction or cooldown tricks - sell transactions are allowed in theory but restricted to amounts so tiny they are useless, or gated behind a cooldown timer that never actually expires.

Because these mechanisms live inside the contract's bytecode, not the token's marketing or website, a honeypot can have a professional-looking site, an active-looking Telegram group, and a normal price chart - and still be a total trap. This is exactly why checking the contract itself, not just the vibe of the project, is the only reliable way to avoid a honeypot.

Honeypot vs. Rug Pull: What's the Difference?

These two terms get used interchangeably, but they describe different mechanics:

  • A honeypot stops you from selling in the first place. The trap is built into the contract's code from day one.
  • A rug pull lets you buy and sell normally at first, then the developers drain the liquidity pool (or dump their own huge token holdings) later, crashing the price to near zero.

A token can technically be both: sellable at launch to build trust, then switched into a honeypot once enough people have bought in, or rugged via a sudden liquidity drain. This is why a full safety scan checks contract permissions, sell behavior, liquidity lock status and holder concentration together, rather than testing for just one risk in isolation.

7 Warning Signs of a Honeypot Token

  1. Buy volume with almost zero sell volume. If dozens of wallets are buying but almost nobody has successfully sold, that is the single strongest honeypot signal there is.
  2. Contract ownership was never renounced. An active owner wallet can usually still change taxes, pause trading, or blacklist addresses at will.
  3. Sell tax is unusually high or was recently changed. Anything approaching 50-100% sell tax should be treated as a red flag, even if the buy tax looks normal.
  4. Liquidity is not locked or burned. Unlocked liquidity means the developer can remove it and crash the price whenever they choose.
  5. Very few unique holders relative to buy transactions. This often means most "buyers" are actually the same wallet or bot testing that trading is still one-directional.
  6. The contract is unverified or uses a proxy pattern. Unverified source code (or a proxy contract that can be upgraded after launch) makes it far harder to confirm what the code actually does.
  7. Aggressive hype with no real utility. Heavy marketing, paid influencer shoutouts and urgency ("buy now before it's too late") are common honeypot and rug pull sales tactics.

How to Check If a Token Is a Honeypot (Step-by-Step)

You do not need to read Solidity or write any code to check a token yourself. Follow these steps:

  1. Copy the token's contract address from its official website, DexScreener page, or block explorer - never trust an address pasted in a random Telegram or Discord message.
  2. Paste it into the free honeypot and rug pull checker on this site. Select the correct blockchain, or leave it on Auto Detect.
  3. Read the Security Checks section of your scan report. It shows, in plain language, whether the contract passed or failed checks for honeypot behavior, buy/sell tax, liquidity lock status, contract ownership and holder concentration.
  4. Look at the overall safety score (0-100) and letter grade. A low score or a failed honeypot check means you should not buy the token, no matter how good the chart looks.
  5. Re-scan before every large purchase. Contract permissions and liquidity can change after launch, so a token that passed yesterday is not guaranteed to be safe today.

This entire process takes under 15 seconds, is completely free, and never requires connecting your wallet or sharing a private key or seed phrase.

What to Do If You Already Bought a Honeypot Token

If you've already bought a token and discovered it will not let you sell, there are a few things worth trying, though none are guaranteed:

  • Try selling a very small amount first, in case there is a minimum or maximum transaction limit rather than a full sell block.
  • Check if the token has a "cooldown" period between buy and sell - some honeypots briefly block sells right after a purchase.
  • Increase your slippage tolerance significantly, since some contracts impose extreme, hidden sell taxes rather than an outright block.
  • Report the contract address to your wallet provider and to community scam-tracking lists so other people don't fall for the same token.
  • Treat any funds spent as a loss and use it as a reason to always scan a contract before buying next time.

How to Protect Yourself From Honeypots and Rug Pulls

The safest habit in crypto is simple: scan before you buy, every single time - especially for new, low-cap, or heavily-hyped tokens. Combine a honeypot and rug pull scan with a few extra habits:

  • Check the Smart Money Radar to see whether a token's trading volume looks organic or artificially inflated.
  • Use the Wallet Tools page to double-check any wallet address before sending funds.
  • Never buy based on social media hype alone - always verify the contract yourself first.
  • Start with a very small test purchase on any new token, and try selling that small amount before committing more money.

Ready to check a token right now?

Paste any contract address into the free scanner below and get an instant honeypot, liquidity and rug pull risk report. New to RugProof? Read our complete RugProof guide for a full walkthrough of every check and tool. Researching a Bitcoin token instead? See our BRC-20 token guide.

Scan a Token Now

Frequently Asked Questions

How can I tell if a crypto token is a honeypot before buying?

Paste the token's contract address into a honeypot checker like the free scanner on this site. It simulates buy and sell activity, checks contract permissions, and flags any code that blocks or heavily taxes selling, all in a few seconds.

Is checking for a honeypot token free?

Yes, honeypot checking on this site is completely free, requires no signup, no wallet connection, and no limit on how many contracts you check.

Can a honeypot token still show price gains on a chart?

Yes. Since only buying is blocked from failing (selling is what fails), the price can appear to rise as more people buy in, making the token look successful right up until holders try to sell and cannot.

What is the biggest red flag for a honeypot token?

Heavy buy volume with little to no successful sell volume is the clearest sign. If almost nobody has sold a token that has plenty of buyers, treat it as a probable honeypot.

Does renouncing contract ownership guarantee a token is not a honeypot?

No. Renouncing ownership removes some owner-only risks, but a honeypot mechanism can still be built permanently into the original contract code and functions the same whether or not ownership was later renounced.

Can honeypot tokens exist on Solana, not just Ethereum and BNB Chain?

Yes. Honeypot-style tricks appear on every major smart contract chain, including Solana, Base, Polygon and Arbitrum, not just Ethereum and BNB Chain. Always scan the contract regardless of which chain it is on.

What is the difference between a static honeypot check and a live simulation?

A static check reads the contract's code and permissions without executing a trade. A live simulation, like the one used in our Honeypot Detector for Ethereum, BNB Chain and Base, actually runs a real buy-then-sell transaction, which can catch tricks that only appear during an actual trade.

Can a token pass a honeypot check today and still be a honeypot tomorrow?

Yes. Some contracts include owner-only functions that can enable honeypot behavior, raise taxes, or pause trading at any time after launch, which is why re-scanning before a large purchase is always a good habit.

Is a verified (open source) contract automatically safe from honeypots?

No. A verified contract simply means its code is publicly readable - the code itself can still contain honeypot logic, hidden owner permissions, or extreme taxes. Verification improves transparency, but it is not a safety guarantee on its own.

What tools on this site help me check for a honeypot?

Use the main Rug Checker for a full 0-100 safety score across 56+ chains, or the dedicated Honeypot Detector for a focused check with live simulation on Ethereum, BNB Chain and Base, and static analysis everywhere else.