Honeypot Tokens: Why You Can Buy but Never Sell

A honeypot token is a scam token whose smart contract allows you to buy but stops you from selling — either by blocking sales outright or by making them so costly that you get almost nothing back. The chart looks like it only goes up, because only the creator can sell, and that one-way chart is exactly what lures new buyers in.

Honeypots are common on decentralized exchanges (DEXs), where anyone can create a token and a trading pool in minutes without review. They target people who buy quickly after seeing a trending token, a "next 100x" post or a Telegram call. Knowing how they work lets you spot most of them before you spend anything.

How Honeypot Tokens Work

On blockchains such as Ethereum and BNB Smart Chain, a token is a smart contract. Its transfer function decides whether a transfer is allowed and how much arrives. A honeypot hides extra conditions inside that function.

Common techniques include:

1. 1Sell blocking. Transfers to the DEX pool (which is what a sale is) fail for anyone not on an allowlist.
2. 2Blacklists. The owner can add any wallet to a blacklist, and the contract rejects its transfers. Some contracts blacklist every buyer automatically.
3. 3Adjustable taxes. The owner can raise the sell fee to 99% or 100% after people buy, so a sale returns almost nothing.
4. 4Hidden max-sell limits. The contract lets you sell only a tiny amount per transaction or per day.
5. 5Trading switches. A "trading enabled" flag that the owner can turn off for everyone except themselves.

Because the creator can still sell, they can cash out or simply pull the liquidity (the pool of paired assets that makes trading possible). This is often combined with a rug pull.

Warning Signs Before You Buy

The most telling signal is the transaction list. On a block explorer, look at the token's transfers to the pool address. If dozens of wallets have bought and none (other than one or two specific addresses) have sold, assume it's a honeypot.

How to Check a Token Step by Step

1. 1Confirm the contract address from official sources. Our guide on verifying a token's official contract address shows how.
2. 2Open the contract on a block explorer and check whether the source code is verified. Unverified code means you can't see what it does.
3. 3Look for risky functions such as setFee, setTax, blacklist, setMaxTx, pause or functions that add addresses to an exclusion list. Their presence isn't proof of a scam, but who can call them matters. Our article on checking token taxes and transfer restrictions explains what to look for.
4. 4Check ownership. Is there an owner address, and has ownership been renounced? Note that renouncing ownership doesn't help if the code already contains hard-coded traps. See renounced ownership explained.
5. 5Read the trade history for successful sells from ordinary wallets.
6. 6Run a honeypot checker as an extra signal. These tools simulate a buy and a sell and report the result and taxes.
7. 7Test with a tiny amount only if everything else looks clean — and accept that even this can be gamed.

Why Checkers and Test Sells Can Be Fooled

Scammers know about these tools. Some honeypots:

• Allow sells for the first few minutes or blocks, then switch restrictions on.
• Whitelist the addresses that checker tools typically simulate from.
• Let small sells through but block larger ones.
• Keep an owner function that can raise taxes later, so the token passes checks today and traps buyers tomorrow.

That's why owner powers matter more than any single test. If one wallet can change the rules after you buy, you're trusting that wallet completely.

How Honeypots Find Their Victims

Honeypots rarely rely on chance. Common promotion channels include:

• Telegram and Discord "call" groups that announce a new token as the next big thing, often run by the creators themselves.
• Trending lists on DEX data sites, where creators buy their own token repeatedly to climb the rankings.
• Copycat names of real projects or trending topics, so people searching for the real token find the fake one.
• Paid posts and fake hype on social media, with screenshots of the rising chart.

If you found a token through any of these routes, slow down. The urgency is part of the trap.

What to Do if You're Trapped

If you've bought a token you can't sell:

• Stop sending funds. Don't pay anyone who claims they can "unlock" the token or recover it for a fee — these are recovery scams.
• Revoke approvals you granted to the token or related contracts.
• Report the token to the DEX interface, the block explorer (many let you flag tokens) and to us via our report form, so other buyers are warned.
• Record the details (contract address, transaction hashes, where you found the token) in case you report to authorities.

Bottom line

A honeypot works because buyers see a rising chart and assume they can leave whenever they like. Before buying any new token, confirm the contract address, read the trade history for real sells, check what the owner can change and treat checker tools as a supplement, not a verdict. If the code or the owner can stop you from selling, don't buy.