TrustDexGuides › How honeypot tokens work

How honeypot tokens trap you — and how to spot one before you buy

A honeypot is the cruelest token scam because it doesn't look like one. Your buy goes through. The chart goes up. And then you discover the only thing you can't do is sell.

Educational guide · reviewed August 2026 · not financial advice

Most token scams take your money at the moment you buy. A honeypot is patient. It lets you in, lets the number on your screen climb, and lets you feel clever — right up until you try to take profit and every sell transaction fails. The tokens are still "yours." They're just welded to your wallet. This guide explains exactly how that weld is built, the on-chain signals that give it away, and a check you can run in under a minute on any token before you commit a cent.

Check a token for honeypot signals now

Paste any Solana mint or EVM 0x… contract. Free, no signup.

What a honeypot actually is

Strip away the metaphor and a honeypot is a one-way door. A normal token is a two-way market: liquidity sits in a pool, you trade in, you trade out, the pool doesn't care which direction you go. A honeypot breaks the "out" direction on purpose while leaving "in" wide open. The result is a token that behaves perfectly during the only action that costs you money — buying — and fails only during the action that would pay you back.

Because your buy succeeds and the position appears in your wallet, nothing feels wrong. The chart reinforces it: since buys are the only trades getting through, price drifts upward with almost no resistance, which reads as momentum. By the time you attempt to sell, the trap has already done its whole job. The deployer waits until enough buyers are stuck, then pulls the liquidity and walks away with the real money that came in.

The three ways the trap gets built

"Honeypot" describes the outcome, not one specific trick. There are three common constructions, and a well-made scam sometimes layers them.

1. The contract blocks the sell outright

The most direct honeypot lives in the token's transfer logic. The contract contains a rule — sometimes a blacklist, sometimes a hidden condition, sometimes a flag only the owner can flip — that causes any transfer to the liquidity pool (i.e. a sell) to revert, while transfers away from it (a buy) go through. Often the deployer's own wallet is whitelisted, so if you only checked "has anyone sold?" you'd see the deployer selling happily and assume the token is fine. Everyone else hits a wall.

2. The tax makes selling pointless

This version lets the sell technically succeed, so naive checks pass, but sets a sell tax so high — 90%, 99%, 100% — that nothing meaningful comes back. Worse are the "upgradeable tax" contracts: you buy when the sell tax is a reasonable 5%, and after enough people are in, the owner raises it to 100% with a single transaction. You were never in a honeypot when you bought. You were put in one afterward.

3. The rug variant — sellable until it isn't

Here the token really is sellable, so it passes a sell simulation cleanly. The trap is that the liquidity is not locked and the mint or freeze authority is still live. The deployer lets the price run, then either mints a flood of new supply into the pool, freezes your ability to transfer, or simply withdraws the liquidity — converting a "real" token into an unsellable one the instant they choose. This is why a clean sell simulation alone is necessary but not sufficient.

The one habit that beats all three: never treat an unrealised gain as real until a wallet that is not the deployer has actually sold and received funds. A price that only goes up is not proof the exit works — it may just be proof that no exit exists.

What the on-chain data shows — and how to read it

Every one of those constructions leaves fingerprints in data anyone can pull for free. You don't need to read Solidity; you need to know which fields matter and what a bad answer looks like.

SignalWhat it tells youThe bad answer
Simulated sellWhether a sell of a small amount would actually succeed against the live contract right nowReverts, or returns near-zero after tax
Mint authorityWhether new supply can still be created (Solana SPL) — dilution / flood riskStill active, not renounced
Freeze authorityWhether the issuer can freeze your balance so you can't transfer it (Solana SPL)Still active
Owner privilegesWhether an EVM owner can change tax, pause trading, or blacklist wallets after launchOwner not renounced, mutable tax
LP statusWhether the liquidity is locked/burned or can be pulled by the deployerUnlocked, deployer holds the LP
Holder concentrationHow much of supply a few wallets (often the deployer) controlTop few wallets hold most of supply
Real sell historyWhether any non-deployer wallet has ever sold and received fundsOnly the deployer has ever sold

No single row is a verdict on its own. A brand-new legitimate token can have concentrated holders on day one; a fine token might not have locked its LP yet. The signal is in the combination — an active mint authority is a shrug by itself and a klaxon next to unlocked liquidity and a sell that reverts. Reading them together is exactly what a scanner does for you in one pass, which is the point of running the check rather than eyeballing an explorer.

A 60-second pre-buy check

Before you swap into anything you found in a Telegram call, a reply on X, or a trending list, walk this once. It is faster than the regret.

  1. Copy the contract address, not the name. Scam tokens clone the ticker of something real. The address is the only identity that can't be faked — use it, and be suspicious of any "buy" link that hides it.
  2. Run a scan and read the sell result first. If a simulated sell reverts or returns near-zero, stop. Nothing else on the page matters.
  3. Check the authorities and LP. Active mint/freeze authority, an un-renounced owner, or unlocked liquidity each mean the token can be turned into a honeypot after you buy. Weigh them together.
  4. Ask whether anyone but the deployer has exited. A chart that only rises with no genuine non-deployer sells is the honeypot's signature, not its refutation.
  5. Size for being wrong. Even a clean read is a snapshot in time. If you buy, buy an amount you can lose, and take real profit early — an exit you actually execute beats a paper gain you can't.

Run the check on your token

Same scanner, from the top of this page — paste the address and read the sell result.

Why "but it's up 400%" is the trap talking

The single most effective thing a honeypot does is weaponise your own greed against your caution. A green chart feels like evidence. It isn't — it's a record of the only trades the contract permits. Every buyer who saw that same chart and reasoned "it keeps going up, it must be legit" added to the pile of trapped money that makes the eventual rug worth pulling. The discipline that protects you is boring and absolute: an unrealised gain in a token you have not verified you can sell is not a gain. It's bait you haven't finished swallowing.

Frequently asked

What is a honeypot token, in one sentence?

A token whose contract or liquidity is arranged so ordinary buyers can purchase it but cannot sell — the position looks profitable while being impossible to exit.

Can I detect a honeypot before buying?

Frequently, yes. Simulating a sell against the live contract, reading the tax and transfer logic, checking mint/freeze authority and LP lock status, and confirming a non-deployer wallet has actually sold will expose most of them. A simulated sell is the strongest single check, but combining several is safest.

The price only goes up — isn't that good?

No. A chart only records the trades that succeed. If sells are blocked, price can only rise until the deployer removes liquidity. An always-up chart with no genuine non-deployer sells is a warning, not reassurance.

Is a high sell tax a honeypot?

Functionally it can be. A 100% sell tax — or a tax the owner can raise after you buy — means you hold the token but can never realise value, which is the same outcome as a hard sell block even if the transaction technically goes through.

Does a clean scan guarantee it's safe?

No check guarantees safety. A scan is a dated snapshot; contracts with a live owner or mint authority can change after you read them. Treat a clean result as "no trap visible right now," size accordingly, and take profit you can actually execute.

TrustDex is an educational risk tool, not financial advice. On-chain data can be incomplete or manipulated; a clean check is a dated snapshot, not a guarantee. Always do your own research. Free · no signup · a TrustDex product