What Is a Honeypot Token?
A honeypot is a malicious crypto token designed to look like a legitimate investment opportunity but is rigged so that anyone who buys in cannot sell. The smart contract contains hidden logic — typically a blacklist, a 99–100% sell tax, or a transfer restriction — that silently blocks sell transactions for all wallets except the scammer's own.
From the outside, a honeypot looks normal: it has a ticker, a chart, trading volume on DEX trackers, and a rising price. Victims discover they are trapped only when they try to sell and the transaction reverts or takes nearly all the value as a "fee." The scammer then drains the liquidity pool, leaving holders with worthless tokens.
How Honeypots Work
There are three main mechanisms honeypots use to trap buyers:
- Sell tax manipulation: The contract applies a different tax to buys and sells. Buys are tax-free or low-tax, but sells carry a 50–100% tax. You can technically sell, but you receive almost nothing back.
- Blacklist on buy: The contract automatically adds every wallet that buys the token to a blacklist. Blacklisted wallets cannot transfer or sell. Only the owner's wallet is exempt.
- Transfer pause: The owner can pause all transfers at any time. Once paused, no one can move tokens until the owner unpauses — which they never do.
On-Chain Warning Signs
Before buying any token, check for these red flags:
- Failed sell simulation: GoPlus runs a real buy-and-sell test. If the sell fails, the token is a honeypot.
- Sell tax above 10%: High sell taxes are used to discourage selling or drain value.
- Blacklist function present: The contract can block specific wallets from selling.
- Transfer pause function: The owner can freeze all token transfers.
- Hidden owner: Proxy patterns can hide who really controls the contract.
- Unrenounced ownership: If the team still owns the contract, they can add blocking code at any time.
Honeypots vs. Rug Pulls
Honeypots and rug pulls are both crypto scams, but they work differently. A honeypottraps you by blocking sells — you bought in, but you cannot get out. A rug pull lets you sell, but the team removes all liquidity from the pool first, so there is nothing to sell into. Both result in total loss of funds, but the mechanism is different.
How to Detect a Honeypot
The most reliable way to detect a honeypot is to run a security scan that includes a buy-and-sell simulation. GuavaIntel's free honeypot detector uses GoPlus Security to simulate both sides of the trade and flags tokens where the sell fails or carries excessive tax. On Solana, RugCheck verifies whether mint and freeze authorities have been renounced.
You can also manually check the contract on a block explorer: look for blacklist,pause, or setTax functions, and verify that contract ownership is renounced.
Frequently Asked Questions
How do I check if a token is a honeypot?
Use a honeypot detector like GuavaIntel's free scanner, which runs a buy-and-sell simulation via GoPlus. If the sell simulation fails or returns a near-100% tax, the token is likely a honeypot. You can also check for unrenounced ownership, blacklist functions, and hidden owners manually.
Can a honeypot be on Solana?
Yes. On Solana, honeypots work differently — instead of smart contract logic, they use mint authority and freeze authority. The team can freeze your token balance or mint unlimited supply, effectively trapping your investment. RugCheck on Solana checks for these authorities.
Are all tokens with high sell tax honeypots?
Not necessarily. Some legitimate tokens have transaction taxes for liquidity funding or reflections. However, sell taxes above 10% are a major red flag, and taxes above 25% are almost always malicious. Always check the tax rate before buying.
Related Terms
Check Before You Trade
Run a free security scan on any token across Ethereum, BSC, Base, and Solana.
Scan a Token Now