Honeypot Tokens: Why You Can Buy but Can't Sell
A honeypot token lets you buy but blocks or taxes away your sale. See how the trap looks, the checks to run before buying, and what to do if you’re stuck.
Key takeaways
- A honeypot token's code lets buys through but blocks sells, or lets the owner raise a sell tax toward 100%.
- Because only buys execute, the chart climbs steadily. A price that never dips is a warning sign, not proof of demand.
- With a 99% sell tax, a position displayed at $2,000 returns just $17 after a $3 network fee.
- Before buying, look for successful sells from ordinary wallets and check whether the owner can change fees or block addresses.
- Already stuck? Stop retrying sells, never pay an unlock fee, save the evidence and report it.
On this page
What is a honeypot token?
A honeypot token is a crypto token whose smart contract accepts your purchase but stops you from selling. The trap sits in the token’s own code, which decides whether any transfer succeeds. A 2024 academic study of contract-based scams (CRPWarner) described this category as “a mechanism to restrict users from selling tokens.”
Scam tokens of all kinds are common on open exchanges. A 2021 study of one large decentralized exchange found more than 10,000 scam tokens, roughly half of the tokens listed there at the time, and estimated that scammers made at least $16 million from 39,762 potential victims.
Honeypots are different from tokens that are merely hard to sell. An illiquid token has too few buyers, so your sale moves the price a lot (see crypto liquidity risk). A honeypot may have a busy chart and a funded pool, yet the contract itself refuses your sale or confiscates most of it.
What a honeypot looks like from the outside
The design is built to look like a winner. Because only buys execute, the price climbs in a smooth staircase, the holder count rises and group chats fill with screenshots of paper gains. Here is how that compares with an ordinary token:
| Signal | Ordinary token | Honeypot token |
|---|---|---|
| Buys | Succeed | Succeed |
| Sells from ordinary wallets | Succeed | Fail, or return almost nothing |
| Who has sold | Many different wallets | Only the deployer or a few insiders |
| Price chart | Up and down days | Mostly up, rarely a red candle |
| Sell tax | Zero or small, fixed | Adjustable by the owner, up to 100% |
| Owner controls | Limited or none | Can block wallets, pause trading, cap sells |
When you try to sell a honeypot, you typically see one of three outcomes: your wallet warns that the transaction will fail, the transaction is sent and reverts, or it succeeds but delivers a tiny fraction of the value on screen. The first outcome costs nothing. The other two cost you gas.
The math of a sell-tax honeypot
Some honeypots let sales go through but let the owner raise the “sell tax” after buyers arrive. Your proceeds then follow a simple formula.
Example: Suppose you bought 500,000 Token X at a hypothetical $0.002 each, spending $1,000. The chart now shows $0.004, so your wallet displays $2,000. The owner has set the sell tax to 99%, and the network fee is a hypothetical $3.
Sale proceeds = Tokens × Price × (1 − Sell tax) − Network fee500,000 × $0.004 × (1 − 0.99) − $3 = $17Ignoring price impact, here is what the same position returns at different tax levels:
| Sell tax | Proceeds before fee | After $3 fee | Result vs. $1,000 spent |
|---|---|---|---|
| 5% | $1,900 | $1,897 | +$897 |
| 50% | $1,000 | $997 | −$3 |
| 99% | $20 | $17 | −$983 (−98.3%) |
| 100% | $0 | −$3 | −$1,003 |
The fully blocked version is worse in a quieter way. Ethereum’s own documentation explains that when a transaction fails during execution, the gas it used is still consumed. Three failed sell attempts at a hypothetical $3 each add $9 to the loss without moving a single token. Our guide on why a failed transaction still costs gas explains the mechanics.
How to check for honeypot signs before you buy
1. Look for real sells
Open the token’s trade history on a block explorer and filter for sales into the pool. You want to see many different, ordinary wallets selling successfully. Hundreds of buys and almost no sells should end the decision.
2. Read what the owner can change
In the verified contract, look for owner-only functions that set fees, add wallets to a block list or allow list, cap transaction sizes, or turn trading on and off. If the source code isn’t verified, you can’t check any of this, which is itself a red flag.
3. Treat scanner results as a floor, not a pass
Token scanners simulate a buy and a sell. A clean result only means the sell worked in that simulation at that moment. An owner who can raise fees or block addresses can change the outcome after you buy.
4. Don’t lean on a tiny test sale
A small sale that succeeds proves little. Some contracts cap sell sizes, and settings can change after you add more money.
5. Ignore tokens that simply appear in your wallet
Unrequested tokens, often with a website in the name, are a common lure toward phishing pages. The patterns overlap with fake crypto airdrops and claim sites.
Common mistakes that keep people trapped
- Reading a smooth chart as strength. In a honeypot, the missing red candles are the tell, not a sign of loyal holders.
- Following instructions to set very high slippage. Promoters sometimes tell buyers to raise slippage tolerance “because of the tax.” A wide tolerance is exactly what lets a confiscatory sell tax take its cut without the trade failing.
- Trusting a rising holder count. In a honeypot, holders accumulate because nobody can leave.
- Accepting a feature story. Labels like “anti-bot protection” or “selling opens after launch” are common ways to present a sell restriction as a benefit.
What to do if you’re stuck in a honeypot
- Stop retrying the sale. Each failed attempt burns gas and changes nothing.
- Never pay to unlock. Anyone offering to whitelist or release your tokens for a fee, or asking for your recovery phrase, is running a second scam. Never share your recovery phrase with anyone.
- Don’t buy more. Claims that you must hold a minimum balance or pay a “tax” before selling are part of the trap.
- Clean up permissions. If you connected your wallet to the token’s website, review and revoke token approvals you granted there.
- Save evidence. Note the contract address, the deployer’s address, your transaction hashes and screenshots of the channels that promoted the token.
- Report it. In the US, report to the FTC at ReportFraud.ftc.gov and the FBI at ic3.gov; elsewhere, use your national fraud reporting service or local police. Our step-by-step guide on how to report a crypto scam covers the UK, EU and beyond.
If the loss affects your taxes, rules vary by country; check with a qualified professional.
The bottom line
A honeypot token turns a rising chart into bait: the buys are real, but the exit is controlled by someone else. Before you buy any new token, confirm that ordinary wallets can sell and that no owner can change the rules later. For the red flags that apply across every scam type, see how to spot a crypto scam.
Frequently asked questions
How do I know if a token is a honeypot?
Look at the token's trade history on a block explorer. If many different wallets have bought but only one or two addresses have ever sold, treat it as a honeypot until proven otherwise. Then check the verified contract for owner functions that change fees, block addresses or switch trading off. Unverified code, or a scanner warning, is reason enough to stay away.
Why does my token sale keep failing?
A sale can fail because the slippage setting is too tight, the pool has too little liquidity, or the token's own code refuses the transfer. If small and large sells both fail while other people's buys keep going through, the contract is the likely cause. Each failed attempt still costs gas, so stop retrying and check the contract before spending more.
Can a honeypot token be unlocked?
Only the contract's owner can change its settings, and a scammer has no reason to release your funds. Messages offering to unlock or whitelist your wallet for a fee, or asking for your recovery phrase so they can move the tokens, are follow-on scams. Never share your recovery phrase with anyone, and don't send more money to regain access to a position.
Are token scanners reliable for detecting honeypots?
They are a useful first filter but not a guarantee. A scanner simulates a buy and a sell at one moment. If the owner can change fees or block addresses later, a token can pass today and trap buyers tomorrow. Combine a scanner result with your own look at real sell transactions and the owner's powers in the code.
Sources
- CRPWarner: Warning the Risk of Contract-related Rug Pull in DeFi Smart Contracts — Lin et al., arXiv
- Trade or Trick? Detecting and Characterizing Scam Tokens on Uniswap Decentralized Exchange — Xia et al., arXiv
- Gas and fees — ethereum.org
- What To Know About Cryptocurrency and Scams — Federal Trade Commission, Consumer Advice
This content is for education only and is not financial, investment, tax or legal advice. Crypto assets are volatile and you can lose money. Examples use hypothetical numbers. See our disclaimer and editorial policy.