How to Spot a Honeypot Token Before You Buy

Most people find out a token is a honeypot the moment they try to take profit and the transaction reverts. By then the money is stuck. Every check below runs on public on-chain data, before you buy: a few minutes by hand, seconds with a scanner.

Honeypots are one trap among several. For the full pre-buy routine, including holder spread and rug pull risk, see how to check if a token is safe.

What is a honeypot token?

A honeypot token is a contract written so buying works normally and selling doesn't. On a DEX, every buy is a transfer out of the liquidity pool to you, and every sell is a transfer from you into the pool. The honeypot hides a rule in its transfer code that only fires on that second direction.

The rule takes a few common forms:

• Blacklist. Buyers get added to a blocked list, automatically on buy or by the owner later. Any transfer from a blocked wallet reverts.
• Whitelist-only sells. Only addresses the creator approved can send tokens to the pool. Everyone else's sell fails.
• Tiny max-sell limit. Sells above a set amount revert, and the amount is set so low that you can never exit a real position.
• Near-100% sell tax. The sell goes through, but the contract keeps almost all of it. This is the "soft" honeypot (more on fee traps in what is a sell tax).
• Endless trading pause. A cooldown or "trading not enabled" flag that the owner's wallets are exempt from and never switch off for anyone else.

Because nobody outside can sell, the chart shows almost nothing but buys. That green, one-way chart is what pulls in more buyers, and it's the whole point of the trap. The tell people miss: if every sell on the chart comes from one or two wallets, those are probably the only wallets allowed to sell.

Some honeypots don't wait for you to buy. They get airdropped into thousands of wallets with a big displayed value, so the coin sitting in your wallet looks like free money until the sell fails or the "claim" site asks for an approval. If that's how you met this token, read what to do with scam tokens in your wallet before you touch it.

How do you spot a honeypot token?

1. Simulate a sell first. This is the most reliable check. A sell simulation runs a buy and then a sell against the live contract without sending a real transaction, then reads the result. If it reverts or returns close to zero, you can't sell - it's a honeypot. Nothing else matters if this fails.
2. Read the buy tax and the sell tax. A sell tax far higher than the buy tax (say 5% buy, 40% sell) is a soft honeypot: you can technically sell, but you lose most of it. A fair tax is usually small and the same both ways.
3. Can the owner still change the contract? If the owner is still active, a token that sells fine today can be switched to a honeypot in one transaction: raise the tax, pause trading, blacklist wallets. Renounced is safer, but check for proxies and other admin roles too.
4. Liquidity, and whether it is locked. Thin liquidity means you can't exit at size even on an honest token. A lock stops the pool from being pulled, which is a different risk from a blocked sell, so pair it with check 1.
5. Deployer history. The wallet that deployed the token often has a track record, and checking a token deployer takes a few minutes on the explorer. A deployer tied to past rugs or honeypots is the loudest warning of all, and honeypot devs often reuse the same code under a new name.

Why is "liquidity locked" not enough?

Locked liquidity only means the creator can't remove the pool. It does nothing about the transfer rules above: a contract with locked liquidity can still blacklist you, cap your sell or tax it to zero. Some honeypots lock liquidity on purpose, because "LP locked" is the badge buyers look for. Always run the sell simulation. What a lock or burn does and doesn't cover is in liquidity locked vs burned.

Can a token turn into a honeypot after you buy?

Yes, if the owner kept control. A sell simulation is a snapshot: it tells you the sell works right now. If the owner can still edit fees, the blacklist or the trading switch, the same token can block sells an hour later. That's why a passed simulation plus an active owner is still a risk, and why checks 1 and 3 belong together. The full safety checklist covers what to look for in owner powers.

Can MoonRadar run these checks for you?

Yes. Doing this by hand for every coin is slow, and the tell you miss is the one that costs you. MoonRadar runs these checks on every new coin it flags, and on any token you paste into the scanner. On Robinhood Chain and ARC, where GoPlus has no data, it simulates the sell itself on-chain: a small buy then sell through the real pool, which is the only reliable honeypot test there. On BNB it runs GoPlus's buy-and-sell simulation. It reads both taxes, checks whether the owner is renounced, measures liquidity (and for coins it calls, how much of the LP is locked or burned), and checks the deployer's rug history, then shows a shield score and a one-line Safety Grade before you trade. The scan is free. Honeypots are labelled, not hidden. If you already use Honeypot.is, here is how the two compare and when to run both.

It's non-custodial: you sign your own trades in your own wallet. A clean result means the contract checks passed. It doesn't mean the coin will go up. Still learning what these checks look like? MoonRadar vs TrenchLab covers practising on a simulator first.