1 Introduction
A honeypot token is a cryptocurrency whose smart contract hides logic that lets victims buy but silently blocks or taxes them at close to 100% when they try to sell. Only whitelisted addresses, usually the deployer, can exit. Buyers watch the price climb, pile in on the fear of missing out, then discover their tokens are frozen in place. Once enough capital is trapped, the deployer drains the pooled liquidity, sending the token to zero for everyone else. It is a close cousin of the rug pull, but the trap is encoded in the contract rather than executed as a single liquidity withdrawal.
~100%
Effective sell tax victims hit
Buy only
Trades that succeed for victims
Seconds
Time to verify before buying
2 Interactive Honeypot Trap Simulation
Order Flow: Buys vs. Sells
Price and Trapped Liquidity
Step 1 - Launch: The token goes live and the contract looks normal. The first buyers come in, every buy succeeds, and the price ticks up from its starting level.
3 Detailed Analysis
Honeypot vs. Rug Pull
Honeypot Token
The trap lives in the contract code. Victims can buy but cannot sell, because transfer or sell logic reverts or applies a near total tax for non whitelisted wallets.
Rug Pull
Trading often works normally until the operator removes the pooled liquidity or dumps a large reserve, crashing the price. The exploit is the act of pulling, not blocked selling.
Detection Methodology
Honeypots are caught primarily through contract simulation: a tool executes a test buy and a test sell against the live contract in a forked environment to confirm whether the sell can actually complete. Static analysis of the bytecode and source flags hidden modifiers, blacklists, whitelist gates, owner controlled trading switches, and transfer hooks that branch on the caller address. Sell tax checks compare the buy tax against the sell tax to expose asymmetric or near 100% sell fees that make exit uneconomic. Analysts also review liquidity lock status, ownership renouncement, and holder distribution to gauge how easily the deployer can drain the pool.
Red Flags
- A simulated sell reverts or returns near zero proceeds while the buy succeeds normally
- Sell tax far higher than buy tax, or an owner function that can change taxes after launch
- Whitelist, blacklist, or address based branching in the transfer logic of the contract
- Unlocked liquidity and retained ownership, with almost no wallets having ever sold
Related Fraud Types
Rug Pull
Developers abandoning a project and running away with investor funds after attracting significant capital.
Flash Loan Attacks
Borrowing large uncollateralized sums within a single transaction to manipulate prices or drain DeFi protocols.
Pump & Dump
Coordinated buying to inflate a token price followed by a mass sell-off, leaving late investors with losses.
Source: FraudCodex - Educational Platform for Financial Crime
URL: https://fraudcodex.org/page/honeypot-token
Page: Honeypot Tokens - Market Abuse / Crypto & Digital Assets
Disclaimer: This content is for educational purposes only and does not constitute legal advice.