How to Tell If a Token Is a Honeypot Before You Buy
Guide · 28 Sep 2026
A honeypot token is designed to let you buy but make selling difficult or impossible. On EVM chains, the trap usually lives in the token contract: transfer rules, blacklists, taxes, pausing, or owner-only controls. Because contracts can be upgraded, proxied, or written to behave differently for different wallets, no single check is perfect. The goal is to gather several independent signals before you risk money.
What a Honeypot Actually Does
Most honeypots share a simple pattern: the buy transaction succeeds, but the sell transaction fails, reverts, or returns far less than expected. Common mechanisms include:
- A sell tax that can be set to 100% or changed after launch.
- A blacklist or whitelist that blocks non-approved wallets from selling.
- Trading controls such as
enableTrading,pause, orsetMaxTxthat the owner can flip. - A hidden mint or transfer restriction that affects only certain addresses.
- Liquidity removal or a lock that does not actually prevent withdrawal.
Some tokens are not full honeypots but still have a "sell trap" that activates later. That is why checking the current state is not enough.
Read the Contract for Dangerous Powers
Open the token contract on a block explorer and look for verified source code. If the source is unverified, you cannot reliably inspect the logic. If it is verified, search for functions and variables such as:
blacklist,setBlacklist,isBlacklistedpause,paused,enableTrading,tradingEnabledsetTaxes,setFees,setMaxTx,setCooldownowner,onlyOwner,transferOwnership,renounceOwnershipmint,burn,upgradeTo,implementation
An active owner with these powers can change the rules after you buy. Renounced ownership removes some controls, but it does not automatically make a token safe. Upgradeable proxy contracts, hidden external calls, and hardcoded restrictions can still trap sellers.
Test the Sell Path, Not Just the Buy
A buy simulation only proves that buying may work. You need evidence that a normal wallet can sell. Honeypot detectors and security scanners simulate buys and sells, but they can be gamed, and they may not catch wallet-specific restrictions. Use more than one tool and compare results. Check:
- Sell tax versus buy tax. A very high sell tax is a major warning.
- Whether the sell simulation succeeds from a wallet that is not whitelisted.
- Whether the contract can block transfers or change taxes after launch.
- Whether the router address is the expected DEX router and not a custom contract.
If you cannot verify a clean sell path, treat the token as unsellable until proven otherwise.
Check Liquidity, Holders, and Trading Patterns
Liquidity and holder data give context. They do not prove a token is safe, but they expose common traps.
- Is liquidity locked or burned? A lock is only as good as the lock provider and the unlock terms.
- Do a few wallets hold most of the supply? Concentrated supply can lead to sudden dumps.
- Are there many buys but almost no sells? That can indicate that sells are failing or being blocked.
- Do transactions show repeated failed sells from ordinary wallets?
- Are the social links, website, and contract copies of another project?
Copycat tokens often reuse a known contract but change the owner controls or fee settings.
Slow Down and Use Multiple Signals
No single indicator is conclusive. Combine contract review, sell-path simulation, liquidity checks, holder distribution, and community claims. Scanners are useful, but they are not guarantees. If a contract has an active owner with blacklist or tax powers, if liquidity is unlocked, or if sell simulations fail, that is a reason to stop and investigate further. Treat any unexplained restriction as a serious risk.
FAQ
Can a honeypot be detected with 100% certainty?
No. Scanners simulate known patterns, but new tricks, proxy upgrades, and wallet-specific rules can hide the sell block. Use results as signals, not guarantees.
Is a renounced contract automatically safe?
No. Renouncing ownership can remove some owner functions, but it does not remove upgradeable proxies, hardcoded taxes, hidden mints, or restrictions already in the code.
What is the quickest red flag before buying?
A failed sell simulation, an extremely high sell tax, or a contract with active blacklist, pause, or setTaxes controls. If you cannot verify a normal sell, treat it as a serious warning. Shingan is a non-custodial, Telegram-first wallet-security bot for EVM wallets across twelve chains.