What Is a Honeypot Token?
A honeypot token is a cryptocurrency whose smart contract is secretly rigged so that you can buy the token but you cannot sell it. From the outside it looks like any other new, exciting token — it has a chart, a community, and a rising price. But the contract code itself is designed to trap your money the moment it enters.
The simplest way to understand a honeypot is the roach motel analogy: it is easy to check in, but impossible to check out. The token is the sweet bait that draws buyers in; the contract is the trap that keeps their funds locked inside forever.
In one sentence:
A honeypot is a token you can buy but can never sell — your money goes in and never comes back out.
How Honeypot Tokens Work
Every honeypot follows the same three-step pattern. Understanding the mechanics is the first step to avoiding the trap.
- 1The buy works perfectly
You swap your ETH, BNB, or SOL for the new token and it arrives in your wallet without a hitch. The transaction confirms fast and the token shows up in your balance. Everything looks normal.
- 2The sell fails silently
When you try to sell, the transaction reverts or the contract swallows the entire proceeds through a 100% sell tax. You pay gas fees for the failed attempt, but no funds come back. The error message often looks random, hiding the real cause.
- 3The developer drains the pool
With buyers unable to exit, the developer pulls the liquidity out of the trading pool or simply holds the trapped funds. The chart may still show a price, but the value is an illusion — your tokens are worthless because they cannot be sold.
Types of Honeypots
Scammers use several different contract tricks to build a honeypot. Knowing the types helps you understand what a security checker is actually looking for.
Sell-Tax Honeypot
The contract lets you buy normally but charges a 99–100% tax on every sell. Your transaction technically succeeds, but you receive nothing back.
Transfer-Pause Honeypot
The owner can freeze all token transfers at will. Once paused, nobody can move or sell their tokens until the owner decides to unpause — which often never happens.
Blacklist Honeypot
Every wallet that buys is automatically added to a hidden blacklist. The contract checks the seller's address and reverts the transaction if the wallet is flagged.
Proxy Honeypot
The token uses a proxy pattern so the real logic lives in a separate contract the owner can swap at any time. Today it works fine; tomorrow it silently upgrades into a honeypot.
Fake-Approval Honeypot
The contract tricks you into granting token approvals or signing permissions that give the owner control over your wallet, letting them drain funds directly.
Max-Transaction Honeypot
Sells are capped at a tiny fraction of your holdings per transaction. Even if each sell works, it would take thousands of transactions to exit a modest position.
Real Honeypot Examples
Honeypots are not a theoretical risk. They have cost real investors real money. Here are a few well-known patterns.
Squid Game Token (SQUID)
Inspired by the Netflix show, SQUID rocketed in price before the developers pulled liquidity. The contract blocked all sells, trapping buyers who could only watch the price climb with no way to exit.
Fake PEPE Copies
When the real PEPE meme coin surged, scammers deployed dozens of tokens named 'PEPE' across BSC and Base. Most were honeypots that accepted buys but reverted every sell transaction.
Mango Markets Exploit Tokens
Tokens created around high-profile exploit events were used as bait. Buyers chasing the narrative found the contracts blacklisted seller wallets on the very first buy.
Elon-themed Honeypots
Whenever Elon Musk tweets about a coin, copycat tokens flood the market. A large share are honeypots designed to capture the spike of interest and trap incoming buyers.
How to Detect a Honeypot
You do not need to read smart contract code to stay safe. A good honeypot checker does the hard work for you in seconds. Follow these four steps before buying any unfamiliar token.
- 1Get the correct contract address
Copy the official contract address from the project's verified website or official social media. Never grab an address from DMs, random Telegram groups, or comment sections — scammers paste fake addresses everywhere.
- 2Run a free honeypot check
Paste the address into Guava's free honeypot detector. It runs a real buy-and-sell simulation plus 30+ security checks across 31 chains — including tax analysis, blacklist detection, and ownership verification — in under 2 seconds.
- 3Read the full security report
Review the risk score, buy and sell tax percentages, and any flagged warnings. A sell tax above 10% or any critical flag is a strong signal to stay away.
- 4Confirm before you commit
If the report comes back clean, start with a small test transaction. Try selling a tiny portion immediately to confirm the exit works before scaling up your position.
Honeypot vs Rug Pull
Honeypots and rug pulls are both devastating scams, but they work in fundamentally different ways. Knowing the difference helps you understand what went wrong — and what to check next time.
| Feature | Honeypot | Rug Pull |
|---|---|---|
| How you lose money | Contract blocks your sell so you can never exit | Developers drain the liquidity pool, crashing the price |
| Can you sell at all? | No — sells revert or return nothing | Yes, but at a near-zero price |
| Where the trap lives | In the token's smart contract code | In the liquidity pool ownership |
| When it happens | From the very first buy | Suddenly, after the price has been pumped |
| How to detect it | Honeypot checker runs a sell simulation | Check liquidity lock and holder concentration |
Frequently Asked Questions
What is a honeypot token in simple terms?
A honeypot token is a crypto token whose smart contract is rigged so you can buy but cannot sell. It looks like a normal, promising investment, but the contract code is designed to trap your money once it enters.
Why is it called a honeypot?
The name comes from the 'roach motel' analogy: easy to check in, impossible to check out. The token is the sweet bait that attracts buyers, and the contract is the trap that prevents them from leaving with their funds.
How can I tell if a token is a honeypot?
Use a honeypot detector like Guava's free checker. It simulates a buy and sell transaction on the real contract and flags high sell taxes, blacklist functions, hidden owners, and other red flags before you risk any money.
Can you get your money back from a honeypot?
No. Once funds are sent into a honeypot contract, they cannot be recovered because the contract code itself prevents the sell. The best you can do is report the token to warn other traders.
Is a honeypot the same as a rug pull?
No. A honeypot traps you by blocking sells at the contract level. A rug pull happens when developers withdraw the liquidity pool, crashing the price. Both are scams, but the mechanism is different.
Which chains have the most honeypots?
Honeypots appear on every chain, but they are most common on low-fee networks like BSC, Base, and Solana where deploying a new token costs almost nothing. Guava's checker covers 31 chains.
Are all new tokens honeypots?
No, but a significant share of brand-new, unverified tokens are. Always run a security check before buying any token that lacks an established track record or a trusted team behind it.
Check Before You Buy
Guava's free honeypot detector runs 30+ checks on any token across 31 chains in under 2 seconds. Don't trade blind.