How to Check If a Crypto Token Is a Honeypot Before Buying

Honeypot contracts are the simplest and most effective scam in the meme coin market. The token appears normal on every chart and aggregator. The price goes up. Your wallet shows a growing balance. But when you try to sell, the transaction fails. Your money is locked permanently. This guide teaches you to detect honeypots before you connect your wallet, using free tools that take less than two minutes. It builds on the detection framework in our complete scam prevention guide.

What Is a Honeypot Contract and How Does It Trap Buyers?

Every token on a blockchain operates through a smart contract that defines the rules for transfers. A legitimate ERC-20 or SPL token allows any holder to transfer or sell freely. A honeypot modifies the transfer or transferFrom function to include conditions that selectively block outgoing transactions.

The technical implementations vary. On Ethereum and Base, the most common method is a hidden _beforeTokenTransfer hook that checks whether the sender is on an approved whitelist. If the sender is not whitelisted, the transaction reverts. The contract deployer whitelists their own wallets while leaving every buyer trapped. GoPlus Security documented over 300,000 honeypot contracts on EVM chains in their annual security report.

On Solana, honeypots work differently because the token standard uses a separate authority model. A creator who retains “freeze authority” can freeze any wallet’s token balance, preventing transfers. RugCheck flags this as a critical risk factor. Pump.fun mitigates this by automatically revoking freeze authority on tokens launched through its platform, but tokens deployed directly on Raydium have no such protection.

How Do You Detect a Honeypot Using Free Scanning Tools?

RugCheck is the standard for Solana tokens. Paste the token mint address and look for three specific flags: active freeze authority (the creator can freeze your tokens), active mint authority (the creator can dilute supply), and unlocked LP tokens. Any one of these alone is a red flag. All three together make a honeypot near-certain.

GoPlus Security goes further on EVM chains. It simulates an actual sell transaction against the contract without spending gas. If the simulated sell fails, the token is a confirmed honeypot. GoPlus also calculates the effective sell tax. A legitimate token charges 0-5% tax. Anything above 50% functions as a soft honeypot, and several scam tokens use a 99.9% sell tax that technically allows selling but returns nothing.

TokenSniffer provides a second opinion by comparing the contract’s bytecode against a database of over 200,000 confirmed scam contracts. If the code matches a known honeypot template, TokenSniffer flags it immediately. Cross-reference with the meme coin red flags checklist for a complete screening process.

What Does the Buy/Sell Ratio on DEXScreener Tell You About Honeypots?

Open the token pair page on DEXScreener. Look at the transaction feed on the right side of the screen. Scroll through the last 50 trades. If every single transaction is a buy and no sells appear, the contract is blocking sell transactions. This is the simplest visual honeypot indicator available.

The 24-hour summary shows total buys versus total sells as both a count and a percentage. A ratio of 100% buys and 0% sells over any meaningful time period is a confirmed honeypot. A ratio of 90/10 with very low sell amounts suggests a high-tax soft honeypot where selling is technically possible but returns almost nothing.

My definitive assessment: the DEXScreener buy/sell ratio check takes five seconds and catches the laziest honeypots. But sophisticated scammers maintain a realistic ratio by executing fake sell transactions from their own wallets. Never rely on DEXScreener alone. Always confirm with a dedicated scanning tool. Use our DEXScreener guide for the full metric breakdown.

How Do You Manually Check a Contract for Honeypot Code?

On Ethereum, navigate to the contract address on Etherscan. Click the “Contract” tab, then “Read Contract.” Look for functions named isBlacklisted, _isExcludedFromFees, maxTxAmount, or tradingEnabled. A tradingEnabled boolean that defaults to false means the owner controls when anyone can sell.

On Solana, Solscan shows the token’s authority settings directly on the token page. Check two fields: “Freeze Authority” and “Mint Authority.” If either shows an active wallet address rather than null or revoked, the creator retains control over your tokens. Pump.fun-graduated tokens automatically have both authorities revoked, which is one reason traders consider them safer.

The absence of verified source code is itself a warning signal. Legitimate projects verify their contracts so users can audit them. An unverified contract on a token older than 24 hours suggests the developer is deliberately hiding the code. According to CertiK security research, over 70% of honeypot contracts on Ethereum had unverified source code.

Which Real Honeypot Scams Show What to Watch For?

Squid Game Token launched during peak Squid Game TV show popularity. CoinMarketCap listed it, driving mainstream visibility. The contract included a function that required buyers to hold a separate “Marbles” token to sell, a condition that was practically impossible to meet. The only wallets that could sell were pre-approved by the developer.

More recently, Solana-based honeypots have evolved. Some use a delayed mechanism where selling works for the first few hours, then a time-lock activates that blocks all further sells. This defeats casual scanning because the token passes automated checks during the initial window. Traders who buy in the first hour can sell; everyone after gets trapped.

The pattern is always the same: artificial scarcity created by blocking sells drives the price upward, attracting more buyers who see green candles. The only protection is pre-buy scanning with dedicated tools. Cross-reference every token with the tokenomics red flags analysis before committing capital.

Should You Test-Sell With a Tiny Amount Before Buying More?

On Solana, buy 0.01 SOL worth of the token through Jupiter or directly on Pump.fun. Wait for the transaction to confirm. Then immediately initiate a sell of the same amount. If the sell executes and you receive a reasonable amount of SOL back (accounting for normal 1-2% slippage and fees), the token allows selling. If the transaction fails or returns near-zero, exit by closing the browser tab and never interacting with that contract again.

On Ethereum or Base, the process is identical but more expensive. Gas fees mean your test trade costs $1-$10 depending on network congestion. Some traders use Tenderly to simulate transactions without spending gas, though this requires technical setup.

The test-sell technique catches every type of honeypot, including sophisticated ones that pass automated scanners. It is the last line of defense after RugCheck, GoPlus, and the DEXScreener ratio check all pass. My recommendation: make the test sell mandatory for any token under 48 hours old, regardless of what scanners say.