How to Check if a Crypto Token is a Honeypot (2026 Guide)

You found a token pumping hard. Chart looks beautiful. You buy in. Then you try to sell — and nothing happens. The transaction fails, or you get hit with a 99% tax. Your money is gone.

That's a honeypot. A smart contract designed to let you buy but not sell. They're the oldest trick in DeFi and they're still catching people every single day.

Here's how to spot them before you lose anything.

What is a honeypot token?

A honeypot is a token where the smart contract blocks or heavily taxes sell transactions. You can buy the token — the chart goes up, everything looks normal — but when you try to sell, the transaction reverts or charges you 50–100% in hidden fees.

Some honeypots are obvious (sell completely blocked). Others are sneaky — they let you sell small amounts but block large sells, or the tax starts low and increases over time.

How honeypots work technically

Most honeypots use one of these tricks in their smart contract:

• Transfer restrictions — the contract checks if the sender is on a blacklist. The deployer adds all buyers except themselves.
• Dynamic tax — sell tax starts at 0% but the owner can change it to 99% at any time via a function call.
• Balance manipulation — the owner can modify wallet balances directly, so your tokens get zeroed out.
• Approve/transferFrom blocks — you can approve the DEX router but the actual transfer call gets reverted.
• Cooldown traps — a forced delay between transactions that gets extended indefinitely.

How to check if a token is a honeypot

The fastest way: paste the contract address into a token scanner that simulates buy and sell transactions. DexScanner uses GoPlus Labs to simulate a full buy-sell cycle before you risk real money.

Here's what to check:

• Honeypot simulation — can you actually sell after buying? This is the definitive test.
• Sell tax — anything above 10% is a red flag. Above 50% is an effective honeypot.
• Buy tax — high buy tax (>10%) means the token is designed to extract value on entry.
• Source code verification — if the contract isn't open source on Etherscan/BscScan, you can't see what it does. That's a problem.
• Transfer pause function — if the owner can freeze all transfers, they can trap your funds.
• Blacklist function — the owner can add your wallet to a blacklist that blocks sells.

Red flags that usually come with honeypots

Honeypots rarely exist in isolation. They usually come packaged with other rug-pull signals:

• LP not locked — if liquidity isn't locked, the deployer can drain the pool AND the token is a honeypot. Double loss.
• Owner not renounced — active ownership means the deployer can change contract rules at any time.
• Very low holder count — fewer than 50 holders usually means the token is brand new and untested.
• Deployer has created honeypots before — serial ruggers reuse wallets. We check the deployer's contract history.

Which chains have the most honeypots?

BSC (BNB Chain) has the highest volume of honeypots because deployment costs are under $1. Ethereum has fewer but they tend to be more sophisticated — proxy contracts that change their logic after launch. Solana honeypots use freeze authority to lock your token account.

DexScanner supports all three chains and 26 others — 29 total. Same scanner, same risk score, any contract address.

What to do if you bought a honeypot

If you're already in a honeypot, your options are limited:

• Try selling a very small amount (1% of your balance). Some honeypots only block large sells.
• Check if the token contract has been updated. Some deployers remove the honeypot logic to avoid attention, then re-enable it later.
• Report the token address on GoPlus and other security databases so others don't fall for it.
• Accept the loss and move on. Trying to 'outsmart' a honeypot contract usually costs more gas fees.