A honeypot is a token engineered to allow buying but block selling. You can purchase the token, watch its price climb, see it sitting in your wallet — but when you try to sell, the transaction fails every time. Your money is trapped, and the scammer controls when (and if) anyone can exit.

Honeypots are among the most psychologically effective scams in crypto because the victim sees unrealized profit. The token might show a 500% gain in your wallet, creating the illusion of wealth while your funds are permanently locked.

How Honeypots Work Technically

At the smart contract level, honeypots modify the token's transfer function to include hidden conditions that block certain types of transactions. There are several technical approaches scammers use, each more sophisticated than the last.

Whitelist-only selling

The most straightforward honeypot maintains an internal whitelist of addresses that are permitted to sell. The creator's wallets and bot wallets are on this whitelist. When you buy, the transfer goes through because you are receiving tokens. When you try to sell, the contract checks the whitelist, finds you are not on it, and reverts the transaction.

From the outside, this looks like a normal transaction failure. Your wallet might show "transaction failed" or "execution reverted" without explaining why. The contract code, if you could read it, contains a require statement that checks the sender against a private mapping.

Dynamic tax honeypot

A more deceptive variant launches with 0% sell tax — making it look perfectly safe on every scanner. The contract contains a function (often with an innocent-sounding name) that allows the owner to change the sell tax at any time. After enough people have bought in, the owner sets the sell tax to 100% or 99%. You can technically sell, but you receive nothing (or almost nothing) from the transaction.

This type is particularly dangerous because tools that scan the contract at launch time will show "no sell restriction detected." The restriction only activates later.

Time-delayed honeypot

Some honeypots are programmed to allow selling for a specific window — usually the first 30-60 minutes after launch. This creates early transactions that confirm "selling works" to potential buyers checking the block explorer. After the window closes, selling is disabled and everyone who bought after that point is trapped.

Early buyers (the scammer's own wallets) sell during the open window, taking profit. Late buyers discover they cannot sell.

Balance-based restriction

The contract checks the buyer's balance and prevents selling if the balance exceeds a certain threshold, or if the sell amount is above a certain percentage. Small test sells might work, convincing you the token is safe, but when you try to sell your full position, the transaction reverts.

How a Typical Honeypot Unfolds

The lifecycle of a honeypot scam follows a predictable pattern that repeats thousands of times daily across Solana, Ethereum, and BNB Chain.

1. Token creation — The scammer deploys a contract with hidden sell restrictions. The token often has an appealing name related to trending topics, memes, or current events.
2. Liquidity addition — A small amount of liquidity is added (typically $500-5,000) to make the token tradeable on a DEX.
3. Bot activation — The scammer's bot army begins trading the token with itself, creating fake volume and pushing it onto trending lists. The wash trading creates the illusion of organic interest.
4. Social push — The token is promoted on Telegram groups, X (Twitter), and sometimes through paid influencer promotions.
5. Victims buy — Real traders see the token trending with high volume and buy in. Buys go through normally.
6. Sells blocked — When victims try to sell, transactions fail. The scammer's wallets are the only ones that can sell.
7. Liquidity removal — Once enough money is trapped, the scammer either removes liquidity (if LP is unlocked) or sells through their whitelisted wallets, draining the pool.

On-Chain Signs of a Honeypot

Even without specialized tools, you can spot potential honeypots by looking at on-chain data:

• One-sided trading — If you see hundreds of buy transactions but very few sells, that is a critical red flag. Normal markets have relatively balanced buy and sell activity.
• Failed sell transactions — Check the token's transaction history on a block explorer. If you see multiple failed transactions, especially with "execution reverted" errors, the token likely blocks sells.
• Extreme buy/sell ratio — A ratio of 20:1 or higher (20 buys for every sell) is almost certainly a honeypot or has extremely high sell taxes.
• Contract not verified — If the contract source code is not published, you cannot verify what the transfer function actually does. Combined with other red flags, this is strong evidence of a honeypot.
• Recently deployed contract — Most honeypots are deployed, operated for a few hours, and abandoned. Tokens less than 24 hours old carry significantly higher risk.

Honeypots on Different Chains

Solana honeypots

On Solana, honeypots primarily use freeze authority to lock wallets from selling. The creator freezes your account after you buy, making your tokens unmovable. RugCheck detects this by checking whether freeze authority has been revoked.

EVM honeypots (Ethereum, BSC, Base)

On EVM chains, honeypots are implemented through smart contract logic — modified transfer functions, hidden blacklists, and dynamic taxes. These are more varied and harder to detect through code analysis alone, which is why simulation-based tools like Honeypot.is are essential.

How to Avoid Honeypot Scams

Protecting yourself from honeypots requires checking before you buy — not after. Once your money is in a honeypot, it is gone.

1. Simulate before you buy. Use Honeypot.is (EVM chains) to simulate a buy and sell transaction. If the sell simulation fails, do not buy.
2. Check with multiple tools. RugCheck (Solana) checks mint and freeze authority. TokenSniffer analyzes EVM contract patterns.
3. Look at the buy/sell ratio. If buys massively outnumber sells, something is blocking sells.
4. Check contract verification. Unverified contracts are impossible to audit.
5. Never trust test sells alone. Sophisticated honeypots pass small sells but block large ones.