Token Security ยท Scam Detection ยท DeFi

How to Detect Honeypot Tokens Before You Buy

Honeypot tokens are built to trap you. The price goes up, you buy in, and then you can't sell. Here's how they work and exactly how to spot them.

You find a new token on DexScreener โ€” clean chart, all green, active Telegram, even a website. You buy in and watch the price keep climbing. Then you try to sell.

The transaction fails. Or it goes through but the "sell tax" takes 100% of your funds. You're stuck. The scammer already made their money from the initial liquidity and your buy pressure. You're left holding tokens you can never convert back to anything real.

How honeypots are coded

The scam is in the contract itself. Honeypot developers add hidden code that blocks sells โ€” sometimes for specific wallet addresses, sometimes for everyone except the deployer. Common techniques:

  • โ€”A "max sell tax" of 100% that only activates after launch
  • โ€”Blacklist functions that target anyone who tries to sell
  • โ€”Transfer restrictions coded to allow only the contract owner to move tokens freely
  • โ€”Hidden admin functions that can be flipped after you buy

The contract usually passes a basic read โ€” it looks like a normal ERC-20 or BEP-20 token. The trap only triggers when you actually try to sell.

Red flags that signal a honeypot

Before using any scanner tool, there are behavioral signals worth knowing:

  • โ€”Nothing but buy transactions โ€” if nobody is selling, ask why
  • โ€”Very high sell tax (anything above 10% is suspicious, above 25% is almost always a trap)
  • โ€”Contract deployed within the last few hours with no audit
  • โ€”Liquidity locked for a suspiciously short time (a few days instead of months)
  • โ€”Top 10 holders own 80%+ of supply โ€” they can crash the price at will

Tools that actually catch honeypots

honeypot.is โ€” Paste a contract address and it simulates a buy and sell against the contract. If the sell fails or extracts a massive tax, it flags it. Works on Ethereum and BSC.

GoPlus Security โ€” More comprehensive. Checks for hidden owner functions, blacklist capabilities, trading restrictions, and whether the contract is verified. Used by major wallets and aggregators.

Token Sniffer โ€” Runs an automated audit on new contracts and assigns a safety score. Not perfect, but catches obvious honeypots within seconds of launch.

The fastest check: copy the contract address, paste it into honeypot.is before you buy anything. Takes 10 seconds. Save yourself real money.

Frequently asked questions

What is a honeypot token in crypto?

A honeypot is coded to allow buying but block selling. You buy in, the price rises, and when you try to exit, your transaction fails or takes 100% as tax.

How do I check if a token is a honeypot?

Use honeypot.is โ€” paste the contract address and it simulates a sell. TxnGuide also runs this check automatically when you hover over contract addresses on DexScreener.

Can a honeypot look legitimate?

Yes. Professional websites, active communities, and real price action don't mean anything. The scam is in the contract code, not the marketing. Always check the contract independently.

Honeypot check before you buy โ€” automatically

TxnGuide runs a GoPlus security scan on any contract address you hover over on DexScreener, DexTools, and similar platforms. See buy tax, sell tax, and risk flags without switching tabs.

Get TxnGuide โ€” It's Free