A honeypot contract is a malicious smart contract designed to let you buy a token but prevent you from selling it. The contract code contains hidden restrictions that block sell transactions for everyone except the deployer. You can buy in (the price chart goes up, looking attractive), but when you try to sell, the transaction reverts. Only the scammer can extract value.

What Is a Honeypot Contract?

3 min read

The short version

A honeypot is a trap disguised as an opportunity. The token chart looks great, people seem to be buying, the price is rising. But when you buy and try to take profit by selling, your sell transaction fails every time. The contract is rigged: only the creator can sell. Everyone else is stuck holding something they can never cash out of.

How It Works

Common honeypot techniques: (1) Transfer restrictions: the contract's transfer function has a hidden check (e.g., if sender is not the owner, revert). (2) Fee manipulation: sell fee is set to 99% for everyone except whitelisted addresses. You sell but receive nothing after fees. (3) Blacklist everyone: the contract automatically blacklists any address that buys, preventing them from selling. The owner is never blacklisted. (4) Approval manipulation: the contract overrides the DEX router's ability to pull tokens during a sell. (5) Max transaction limits: selling limit set to 0 for non-owner addresses. Detection: use honeypot checkers (honeypot.is, tokensniffer.com) that simulate a buy-then-sell transaction. If the simulated sell fails, it is a honeypot. Always test with a tiny amount on a new token before committing significant capital.

Detecting a honeypot before buying

You see a new token trending on DEXScreener with 500% gains in 2 hours. Before buying: (1) You copy the contract address and paste it into honeypot.is. The tool simulates a buy and sell transaction. Result: Buy: Success. Sell: FAIL. This token is likely a honeypot. (2) You check on Etherscan: contract is not verified (source code hidden). (3) You check holders: top wallet holds 80% of supply. (4) You check the deployer: same address launched 12 other tokens in the past month, all now at zero. Every signal screams honeypot. You avoid it. Other buyers who did not check lose everything they put in.

What People Get Wrong

  • Honeypots are easy to spot by looking at the chart

    Honeypot charts look healthy because buys work fine (chart goes up). Some scammers even do fake sells from whitelisted wallets to create the appearance of working sell pressure. The chart alone tells you nothing about whether YOU can sell.

  • If other people sold successfully, it is safe

    Scammers whitelist a few addresses (their own) to create fake sell transactions on the chart. These addresses can sell; you cannot. Just because sells appear in the transaction history does not mean any random buyer can sell.

  • Only brand-new tokens can be honeypots

    Some honeypots start as legitimate tokens and add sell restrictions later through upgradeable proxy contracts. The contract was fine at launch, then the team pushes a malicious upgrade that blocks sells. This is why upgradeable tokens from unknown teams carry additional risk.

Sources & Further Reading

  • Honeypot.is

    Free tool to simulate buy/sell and detect honeypot tokens before purchasing

  • Token Sniffer

    Contract analysis that flags sell restrictions, hidden mints, and other scam patterns

Questions People Also Ask

How do I check if a token is a honeypot?
Use honeypot.is or tokensniffer.com before buying. Paste the contract address and check the simulation result. Also: verify the contract source is published on Etherscan (unverified = red flag), check if the token has sell transactions from non-deployer addresses, and test with a tiny buy/sell first.
Can I recover funds from a honeypot?
Almost never. If the contract blocks selling, your tokens are stuck. In rare cases, if the contract has an exploitable bug, a white-hat could potentially extract funds, but this is extremely uncommon. Prevention (checking before buying) is the only reliable protection.
Are honeypots only on DEXs?
Yes, because centralized exchanges vet tokens before listing. Honeypots exploit the permissionless nature of DEXs where anyone can list anything. You will never encounter a honeypot on Coinbase or Binance (listed tokens), only on Uniswap, PancakeSwap, or similar open DEXs.

More in Security & Risk

See all →
Was this page helpful?

Page last checked