HostHostDeFi › Guides › Honeypot check
How to check if a token is a honeypot — before you buy it
A honeypot lets you in and never lets you out. The check takes under a minute: simulate the sell, read the contract's exit controls, and know which variants a quick scan can't see.
The fastest honest answer: paste the token's contract address into a risk scanner and read the sell-side flags. A honeypot is a contract engineered so buying succeeds and selling fails — and the only way to know for certain without spending money is to simulate the round trip or read the mechanisms that make the trap work. Everything below is how to do that check properly, what each flag means, and where the edge cases live.
Run the check now
Paste a contract address or exact ticker — the scan reads the contract's controls and liquidity in one pass, free, no signup.
What a honeypot is, in one sentence
A token whose contract permits the buy transaction and reverts, blocks, or confiscates the sell. Your swap goes through, the balance shows in your wallet, and the trap only becomes visible when you try to leave: the sell fails, or it executes and hands you back a fraction of what the chart promised. The mechanism lives in the token contract itself — it is not slippage, not thin liquidity, and not a slow chain, though scammers count on you blaming all three.
That definition matters because it tells you what a check has to prove. It is not enough that a token looks tradable — every honeypot looks tradable from the buy side. The check has to answer a narrower question: can an ordinary wallet, not the deployer's, actually exit?
The three-layer check
Done properly, a honeypot check has three layers, ordered from strongest evidence to supporting evidence.
Simulate the sell — the only direct test
A buy-then-sell simulation runs both legs of the round trip against the real contract without spending anything. If the simulated sell reverts, the token is a honeypot by definition — no interpretation needed. If it succeeds, check the simulated proceeds: a "successful" sell that returns 2% of the quoted amount is a 98% sell tax wearing a pass. Simulators miss traps that only arm after a delay or a threshold, which is why the next two layers exist.
Read the contract's exit controls
Honeypots are built from a small parts kit, and the parts are visible before you buy. On Solana, the tells are the mint and freeze authorities — a live freeze authority can lock your tokens in place after you buy, which is the sell-block implemented as an account flag. Our guide to mint and freeze authority covers what each one does and why "renounced" is the answer you want to see. On EVM chains the kit is a blacklist mapping, a whitelist-only transfer path, a pausable switch, a modifiable tax with no cap, or an owner-only trading enable — all readable in the verified source or detectable by the scanner's static checks.
Check whether anyone else can leave
The supporting evidence: who holds the liquidity, and who has actually sold. A pool where the deployer controls the LP can drain the exit door rather than lock it — the mechanics are different (that's a rug, not a honeypot) but the outcome rhymes, so check whether the liquidity is locked or burned at the same time. Then look at the holder table: a token thousands of wallets bought but only insiders ever sold is the honeypot's signature in the data, and reading the distribution is how you spot it.
What the scan reads, chain by chain
| Signal | What it catches | Where it shows up |
|---|---|---|
| Sell simulation | Reverted or confiscated exits | The scanner's simulated round trip |
| Mint authority live | Unbounded supply — dilutes, doesn't trap | Solana contract flags |
| Freeze authority live | Your balance frozen post-buy — the classic trap | Solana contract flags |
| Blacklist / whitelist logic | Sell rights by address, not by market | EVM contract checks |
| Modifiable or uncapped tax | The 99% "successful" sell | EVM contract checks |
| Liquidity disposition | The unlocked door next to the locked one | Pool read |
| Holder concentration | Insiders-only exits | Distribution read |
No single row is the verdict — the read is the combination. A token with renounced authorities, locked liquidity, and a distribution where strangers actually sell is as close to "not a honeypot" as a snapshot gets.
The variants a quick check can miss
Honest scope: the parts kit keeps mutating, and a scanner reading today's contract can't see tomorrow's. The variants that most often slip a one-pass check are covered in detail in the sell-tax and blacklist variants guide, but the short version:
- The slow-arm trap — sell works in week one, a proxy upgrade or an owner call arms the block later. The defense is checking for upgradeable proxy patterns, which is its own read.
- The graduated tax — sells succeed but at a confiscatory rate that a "can you sell" test alone won't flag. Always compare simulated proceeds to the quoted price.
- The threshold trap — sells under a size pass, exits above it revert. Small test transactions look clean by design.
- The cooldown lock — one sell per wallet per window; the first exit works, you're locked for the real one.
The hedge against all four is the same boring habit: if the size matters, test the exit with an amount you can afford to lose before committing the amount you can't.
The 60-second version: paste the contract into the scanner → the sell flag and the authority flags answer "can I get out" → the liquidity flag answers "will there be a door to get out through" → the holder table answers "did anyone like me ever leave." Four answers, one page, before the buy button.
The five-minute manual version
If you'd rather read the chain yourself, the same check decomposes into explorer lookups. On Solana: pull the mint account and read whether mint authority and freeze authority show a live public key or "none"; then read the largest pool account and check whether the LP tokens were burned or sit spendable in a wallet. On EVM: open the contract tab, find the verified source, and search it for blacklist, _tax, maxTx, tradingEnabled, and onlyOwner paths that touch the transfer function — then check who the LP tokens belong to. Either way the last step is identical: read the top-holder list and the recent sell history, and count how many non-insider wallets have ever exited. The risk-scan field guide walks every one of those fields with screenshots of what each verdict looks like.
One warning about doing it by hand: verify the contract address first. A perfect honeypot check run against a clone's address tells you the clone is safe, which is precisely the mistake the cloner is selling. Confirm the mint from the project's own channels — or better, from the verified-list entry — before you check anything else about it.
If you already bought one
Occasionally a sell reverts on a token that isn't a honeypot — extreme slippage settings, a paused pool, a chain congestion hiccup. The distinction: retry the sell small with generous slippage; a real market friction fails differently than a hardcoded revert, and the scanner's simulation tells you which one you're looking at. If it is a honeypot, the honest advice is short: the tokens are very likely unrecoverable, sells that do execute return crumbs, and the correct spend is zero more dollars — no "averaging down" into a contract that won't let you leave. What to do after a rug covers the aftermath, including the recovery scammers who show up next.
Make it a habit, not an event
The reason honeypots still work is not that the check is hard — it is that the check is skipped. The traders who never sit in one are not smarter readers of contracts; they are people for whom "paste the mint, read four flags" is the same motion as checking a price. Build the scan into the buy and the whole class of trap stops being yours to fall into. The pre-buy checklist for a brand-new token is wider than just the exit test — the first-hour checks and the full memecoin checklist sequence it with everything else.
Frequently asked
How do I check if a token is a honeypot?
Paste the contract address into a token risk scanner and read the sell-side flags. The decisive test is a simulated buy-then-sell: if the sell leg reverts or returns a fraction of the quote, the token is a honeypot. Support it by checking for a live freeze authority (Solana), blacklist or uncapped-tax logic (EVM), and whether the liquidity is locked.
What is a honeypot token in crypto?
A token whose contract permits buying but blocks or confiscates selling. The balance appears in your wallet normally — the trap only shows when you try to exit: the sell transaction fails, or it executes at a confiscatory tax. It is a property of the contract code, not of the market around it.
Can a honeypot be detected before buying?
Yes — that is the entire point of the check. A sell simulation runs the round trip against the real contract with no money at risk, and the contract's exit controls (freeze authority, blacklist mappings, pausable transfers, modifiable taxes) are all readable before you spend a dollar. The variants that evade a one-pass check are delayed-arm traps and threshold traps, covered in the variants guide.
What does freeze authority mean on Solana?
Freeze authority is a Solana token-account control that lets its holder freeze any holder's token account — blocking that wallet from moving or selling the token at all. A live freeze authority in the wrong hands is the classic Solana honeypot mechanism. 'Renounced' or 'disabled' means nobody holds it, which is what you want to see.
Is a high sell tax the same as a honeypot?
Practically, yes — a 95% sell tax leaves you with crumbs, which is a honeypot's outcome even if the sell technically succeeds. The honest test compares simulated sell proceeds to the quoted price, not just whether the transaction goes through. A token that 'lets' you sell at a 98% loss is a trap with extra steps.
If a token passed a honeypot check last week, is it still safe?
Not necessarily. Upgradeable proxy contracts can arm the trap after launch, and owner-controlled flags can flip later. Re-run the scan before sizing in again, and check for proxy patterns that allow the contract to change under your feet.