Some new crypto tokens can be bought but never sold. These are called honeypot tokens, and they are one of the most common traps on decentralized exchanges.
This article pulls together the key numbers and facts from security firms, crypto exchanges and token-checking tools. It covers how the scam works, the warning signs and what the math says about your money.
These scams take advantage of how open decentralized exchanges are. Almost anyone can create a token and set up a market for it in a short time.
Many figures below come from worked examples in the source guides. They show how the scam works in dollars and cents. They are not counts of total losses across the market.
Crypto Honeypot Statistics at a Glance
The table below lists the main figures covered in this article. Each one is explained in the sections that follow.
| Figure | What it means |
|---|---|
| 7 | Main types of honeypot tokens described in the source guides |
| 6 | Stages in a typical honeypot scam |
| 99% | Example sell tax used by a high-tax honeypot |
| $10 | What a $1,000 sale returns after a 99% sell tax |
| 400% | Paper gain in the SafeMoonX example that could not be cashed out |
| 12 | Checks on the pre-buy security checklist |
| 7 | Token risk indicators listed in GoPlus documentation |
| 6 | Known limits of automated honeypot checkers |
What Is a Crypto Honeypot?
A crypto honeypot is a token built to let people buy while stopping them from selling. Some honeypots allow selling but charge fees close to 100%, so the seller gets almost nothing back.
Binance describes honeypots as setups that lure users with the promise of gains, then use hidden limits to keep their funds stuck. The name comes from using something sweet as bait.
In cybersecurity, a honeypot can also be a legitimate trap used to study hackers. In crypto scams, the same idea is turned against investors.
The MoonRocket Example
One example in the source material follows a made-up token called MoonRocket. It launches at $0.001 and climbs to $0.01 within a few hours after social media promotion.
An investor buys $1,000 worth. The price then rises another 100%, so the wallet shows $2,000.
When the investor tries to sell, the transaction fails. The contract blocks regular holders from sending tokens to the trading pool, while wallets tied to the creator may still sell.
| MoonRocket metric | Value |
|---|---|
| Launch price | $0.001 |
| Price after promotion | $0.01 |
| Amount invested | $1,000 |
| Price rise after purchase | 100% |
| Value shown in wallet | $2,000 |
| Value that can be sold | $0 |
The key point is simple. Buying works, but leaving is blocked or made too costly to be worth it.
How a Honeypot Scam Works in Six Stages
Most honeypot scams mix harmful smart contract code with heavy promotion. The details change from one scam to the next, but many follow the same six steps.
| Stage | What happens |
|---|---|
| 1. Create the token | A scammer launches a token on a blockchain such as Ethereum or BNB Smart Chain. The code hides limits on selling. |
| 2. Add liquidity | The creator sets up a trading pool against ETH or BNB. This makes the token look like a working market. |
| 3. Promote | Social media posts, chat groups and fake partnership claims push people to buy fast. |
| 4. Show gains | New buying lifts the price on the chart, which shows profits on paper. |
| 5. Block exits | Sell orders fail or face huge fees. Insider wallets can still sell. |
| 6. Take the money | The scammer sells privileged tokens or pulls liquidity. Buyers are left with near-worthless tokens. |
Binance’s July 2026 investigation describes these same steps. They include sell limits, fake trading activity and the final removal of liquidity.
Why Buying Works but Selling Fails
When you buy on a decentralized exchange, the pool sends tokens to your wallet. When you sell, tokens must move from your wallet back to the pool.
A harmful contract can check who is sending and where the tokens are going. It can allow transfers out of the pool and reject transfers into it, so buys succeed and sells fail.
CertiK has documented honeypot contracts that use hidden conditions like this. These limits do not show up in a token’s name, website or price chart.
Seven Types of Honeypot Tokens
The source guides describe seven main types of honeypot. They fall into three groups based on how they trap buyers.
Three types block the sale outright. Two shrink the payout, and two change the rules after launch.
| Honeypot type | How it works | Risk to the buyer | Group |
|---|---|---|---|
| Sell-blocking | Rejects regular sell orders | Tokens cannot be sold | Block the sale |
| Blacklist | Blocks chosen wallet addresses | Buyers cannot transfer | Block the sale |
| Whitelist | Only approved wallets may sell | Insiders exit, others are stuck | Block the sale |
| High-tax | Charges huge fees on sales | Most of the money is lost | Shrink the payout |
| Maximum-sell | Limits sales to tiny amounts | A real exit is not practical | Shrink the payout |
| Delayed | Turns on limits after launch | Early tests give false comfort | Change rules later |
| Upgradeable | Contract code can be changed | Selling can be blocked at any time | Change rules later |
Binance lists sell limits, whitelists, blacklists and high taxes among the main tools used to trap buyers. Delayed and upgradeable honeypots are harder to catch because early tests can pass.
How Sell Taxes Shrink Your Payout
Some tokens charge a small fee on trades for normal reasons. A high-tax honeypot uses the same feature to take almost everything.
The table below shows what a $1,000 sale returns at different sell tax rates, before network fees. The 99% rate is the example used in the source guides.
| Sell tax | Amount received | Amount taken by the tax |
|---|---|---|
| 0% | $1,000 | $0 |
| 5% | $950 | $50 |
| 10% | $900 | $100 |
| 25% | $750 | $250 |
| 50% | $500 | $500 |
| 75% | $250 | $750 |
| 90% | $100 | $900 |
| 99% | $10 | $990 |
At a 99% tax, a $1,000 sale returns about $10. The token can technically be sold, but the scam still keeps nearly all the money.
Taxes close to 100% are a strong warning sign. So is a contract that lets the owner raise the tax at any time.
The Gap Between Displayed Value and Real Value
A token’s price on a chart is based on recent trades or a formula tied to the trading pool. It does not promise that every holder can sell at that price.
The SafeMoonX example in the source material shows how wide this gap can get.
| SafeMoonX metric | Value |
|---|---|
| Initial investment | $1,000 |
| Purchase price | $0.01 |
| Tokens purchased | 100,000 |
| Displayed market price | $0.05 |
| Value shown in wallet | $5,000 |
| Paper gain | 400% |
| Ability to sell | Blocked |
| Money that can be cashed out | Possibly $0 |
On paper, the investor made a 400% gain. In practice, the amount they could cash out may be zero.
New buys keep pushing the price higher while sales from regular holders fail. This makes demand look strong when it is not.
A higher number in a wallet is not a profit. What matters is whether the tokens can be sold and how much money would come back.
Warning Signs and Detection Tools by the Numbers
The source guides list seven common warning signs. No single sign proves fraud, but several together should raise doubts.
| Warning sign | Why it matters |
|---|---|
| Almost no successful sells | Real markets have both buyers and sellers |
| Very high sell tax | Fees near 100% wipe out the sale |
| Hidden blacklist function | The owner can block chosen wallets |
| Unverified source code | Outsiders cannot easily check the rules |
| Few wallets hold most tokens | Insiders can control the market |
| Price rises with no selling | Trading may be restricted |
| Heavy hype from anonymous accounts | Pressure to buy fast cuts research short |
Binance.US points to unverified contracts, odd trading history, concentrated ownership and sudden liquidity removal as warning signs.
What the Checkers Report
Two widely used tools are Honeypot.is and GoPlus Security. Both study a token’s contract and may run test trades to see if selling works.
Their documentation lists different checks. The table shows what each one says it covers.
| Check | Honeypot.is | GoPlus |
|---|---|---|
| Honeypot status | Listed | Listed |
| Buy and sell taxes | Listed | Listed |
| Simulated trades | Listed | Not listed |
| Limits on buy or sell size | Listed | Listed (sell limits) |
| Blacklist controls | Not listed | Listed |
| Pause on transfers | Not listed | Listed |
| Upgradeable contracts | Not listed | Listed |
| Owner privileges | Not listed | Listed |
Reading a Token’s Trading History
A block explorer shows every buy and sell for a token. If hundreds of people have bought but almost no regular holders have sold, that is a reason to look closer.
A few successful sales do not prove a token is safe. Some honeypots let developer wallets sell while blocking everyone else, and Kraken notes that some allow limited selling to look real.
Failed transactions can be a clue, but they are not proof on their own. Low gas, slippage settings and network traffic can also cause a sale to fail.
A market run by a small group of wallets making the same trades over and over also deserves a closer look. Some scams create fake activity to make demand look real.
Six Limits of Automated Checks
The source guides list six reasons a clean scan is not a guarantee. Code may not be verified, contracts can be upgraded, and rules can treat wallets differently.
Traps can also switch on later, outside contracts can affect transfers and liquidity can vanish. A token that passes today can fail tomorrow.
GoPlus warns that some fields may be blank when code is unverified or uses a proxy setup. Missing data is not a sign of safety, and a token that cannot be checked may deserve more caution.
Honeypots vs Rug Pulls vs Pump-and-Dump Schemes
These three scams are often confused. They can overlap, but each works in a different way.
| Feature | Honeypot | Rug pull | Pump-and-dump |
|---|---|---|---|
| Main method | Blocks or heavily taxes selling | Insiders pull value out | Hype, then insiders sell |
| Can buyers buy? | Usually yes | Usually yes, before the exit | Yes |
| Can buyers sell? | Often blocked | May still be possible | Yes, at falling prices |
| Common tool | Harmful contract rules | Liquidity removal or insider sales | Coordinated buying and promotion |
| Price chart | Can show a fake rise | Often collapses at the exit | Spikes, then crashes |
| Main risk | Funds become trapped | Value or liquidity collapses | Big losses for late buyers |
Chainalysis describes rug pulls as schemes where developers remove liquidity or abandon investors after raising money. A honeypot can be one part of a larger rug pull.
Same Price Rise, Different Outcome
In the source examples, both a pump-and-dump token and a honeypot rise from $0.01 to $0.10. What happens next is very different.
In the pump-and-dump, insiders sell and the price drops to $0.005. That is a 95% fall from the peak, but late buyers can still sell.
In the honeypot, the chart can stay at $0.10. Regular holders still cannot sell, so the high price does them no good.
A 12-Point Checklist Before You Buy
The source guides offer 12 checks for any new token. Six cover the contract code, three cover the market and three cover the project’s identity and claims.
| Check | What to look at | Main risk | Group |
|---|---|---|---|
| Contract address | The exact token identity | Fake copies | Identity and claims |
| Verified source code | Whether the code is public | Hidden functions | Contract code |
| Honeypot test | Whether a normal sale works | Sell blocks | Contract code |
| Sell tax | Size of trade fees | Huge deductions | Contract code |
| Blacklist controls | Whether wallets can be blocked | Selective selling | Contract code |
| Transfer limits | Pause and transfer powers | Frozen tokens | Contract code |
| Contract upgrades | Who can change the code | Harmful changes later | Contract code |
| Liquidity | Funds in the trading pool | No way to exit | Market and trading |
| Holder spread | How many wallets hold most tokens | Insider control | Market and trading |
| Trading history | Real sales by regular holders | Fake activity | Market and trading |
| Project information | Team and documents | False claims | Identity and claims |
| Social media claims | Big promises and pressure | Buying on hype | Identity and claims |
Contract checks carry the most weight. A token that sells fine today can still be dangerous if an admin can change its rules tomorrow.
To check a token, start with the correct contract address and the right blockchain. Then run a known checker, read the results, review real trades on a block explorer and see what control the developer keeps.
Locked Liquidity, Meme Coins and Solana
Some projects advertise locked liquidity as proof of safety. A lock stops certain pool funds from being pulled for a set time, such as 12 months.
A lock does not stop hidden sell blocks, high taxes, new token minting, blacklists or code upgrades. A token with locked liquidity can still be a honeypot.
Meme coins are frequent targets because their prices often depend on hype. Launching a token is cheap, and many have no clear team, documents or verified code.
Not every meme coin is a scam. Kraken warns that honeypots often exploit hype around new tokens when buyers focus on price instead of contract safety.
Honeypot-style limits can also exist on Solana. Its token system works differently from Ethereum, so buyers need tools that support that network.
A polished website does not prove a token is safe either. Scammers can copy whitepapers and roadmaps, and an audit only counts if it covers the contract version in use.
What to Do If You Buy a Honeypot Token
First, rule out normal problems. A sale can fail because of low gas, the wrong network, poor settings or thin liquidity.
Avoid trying the same failed sale again and again, since each try can cost network fees. Raising slippage will not beat a deliberate block and could lead to a very bad price if a sale goes through.
Never pay an unlock fee or verification tax to sell. Never share a seed phrase or private key with anyone offering to recover funds.
Chainalysis lists recovery fraud among common crypto scams. Some fraudsters target victims a second time by asking for money upfront.
Save transaction hashes, contract addresses and messages. Report the scam to law enforcement and to your crypto service provider.
Check whether the token or website got approval to spend your other coins, and revoke any you do not need. Disconnecting a website does not cancel those approvals on its own.
Recovery is often hard and sometimes impossible. Blockchain transactions generally cannot be reversed, and detection tools cannot undo a trade.
Key Takeaways
Honeypot scams rely on one false belief. It is the idea that a token showing a price can be sold at that price.
The numbers in this article show the gap. A $1,000 buy can show $5,000 on screen and return nothing, and a 99% sell tax turns $1,000 into about $10.
Tools like Honeypot.is and GoPlus help, but each has limits. The most useful question before buying any new token is whether regular holders can sell and get their money back.
Sources
- CertiK: Honeypot Scams
- Binance: Understanding Honeypot Scams
- Binance.US: What Is a Honeypot Scam?
- Kraken: Honeypot Crypto Scams, How They Work
- Honeypot.is: Official API Documentation
- GoPlus Security: Token Security API
- GoPlus Security: API Response Details
- Chainalysis: What Is a Crypto Scam?
This article is for information only and is not financial or investment advice. Crypto assets carry risks, including fraud and the loss of all money invested.
