Security Guide

How to Detect Honeypot Tokens

Honeypot tokens let you buy but prevent you from selling. Learn five proven detection methods that take minutes and can save you from losing your entire investment.

Step-by-Step Guide

🤖
Step 1

Use Automated Scanners

Start with Coinibi's built-in honeypot scanner, which automatically simulates buy and sell transactions against the token's smart contract. The scanner checks whether a sell transaction can execute successfully and calculates the actual sell tax. If the scanner reports a failed sell simulation or an extreme tax rate above 50%, the token is almost certainly a honeypot. Automated scanning is the fastest and most reliable first check.

💱
Step 2

Check Sell Function

Review the token's trade history on the block explorer. A healthy token has both buy and sell transactions from many different addresses. If you see dozens of buy transactions but zero successful sells (or sells only from the deployer address), the token has a sell restriction. On Coinibi, the safety score automatically flags tokens with no sell history as potential honeypots.

📝
Step 3

Verify Token Approvals

Some honeypots work by manipulating the DEX approval mechanism. After you buy, the contract revokes or modifies your approval to sell through the router. Check whether the token contract has functions like setApproval, overrideAllowance, or custom transfer hooks that could interfere with your ability to sell. If the approval is revoked after buying, you are trapped.

🧪
Step 4

Test with Small Buy

If the automated checks pass but you still have doubts, make a very small test purchase (the minimum viable amount) and immediately attempt to sell it. This real-world test confirms whether the sell function actually works for your wallet. If the sell fails, reverts, or applies an unexpectedly high tax, do not buy more. The small amount lost in testing is far better than losing a larger investment.

🔎
Step 5

Analyze Contract Code Patterns

If the contract source code is verified, search for common honeypot patterns: functions named blacklist, setBlacklist, or isBlacklisted that can block specific addresses from selling; setMaxTxAmount or setMaxSellAmount that can be set to zero; transfer functions with conditional logic that treats the owner differently from other holders; and pausable or freeze functions that can halt all trading.

Frequently Asked Questions

What is a honeypot token in crypto?+

A honeypot token is a type of cryptocurrency scam where the smart contract allows you to buy the token but prevents you from selling it. The contract contains hidden restrictions — such as a 100% sell tax, address blacklisting, or sell function revert — that block sell transactions for everyone except the deployer. Your investment becomes permanently trapped.

How common are honeypot tokens?+

Honeypot tokens are extremely common on decentralized exchanges, accounting for an estimated 30-40% of newly launched tokens on some chains. They are particularly prevalent on BSC and other low-fee chains where deploying a scam contract costs very little. This high prevalence makes honeypot detection an essential skill for any DEX trader.

Can I recover funds from a honeypot?+

In almost all cases, funds trapped in a honeypot token cannot be recovered. The smart contract is specifically designed to prevent selling. There is no technical mechanism to bypass the sell restriction, and blockchain transactions are irreversible. The best protection is prevention — always run a honeypot check before buying any new token.

What is the difference between a honeypot and a rug pull?+

A honeypot prevents you from selling your tokens by blocking sell transactions at the contract level. A rug pull occurs when the token creator removes all liquidity from the trading pool, crashing the price to zero. Both are scams, but they use different mechanisms. A token can be both a honeypot and a rug pull if the creator blocks sells and later drains liquidity.

Does Coinibi automatically detect honeypot tokens?+

Yes. Coinibi's safety scanner automatically simulates sell transactions for every token in the live feed. Tokens that fail the sell simulation or show extreme sell taxes are flagged with a honeypot warning in the safety score. You can also manually check any token using the Token Checker tool by entering the contract address.

Related Reading

Try Coinibi Tools

Use our free tools to put this knowledge into practice.