Honeypot.is — How To Detect Crypto Tokens You Can't Sell (2026 Guide)

What is a honeypot token?

A honeypot token's contract has logic that prevents selling for most users — or charges a 95-99% sell tax that makes selling unprofitable. The contract looks normal: buys execute, chart shows volume, price 'grows'. Then when you try to sell, the transaction either reverts or returns near-zero proceeds. You're permanently trapped.

The most common pattern: a whitelist function that allows only specific addresses (the developer's) to sell. Everyone else's sell transactions revert. Variants include time-locks ('you can sell after 30 days' that never come), tax-based traps (95% sell tax), and access-controlled functions disguised as standard ERC-20 methods.

How Honeypot.is works

Honeypot.is operates a forked Ethereum/BSC/Polygon node. When you submit a token contract, it:

1. Simulates a buy transaction from a random address using a small amount of WETH/WBNB.
2. Records: did the buy succeed? What was the actual buy tax?
3. Simulates a sell of the just-bought tokens from the same address.
4. Records: did the sell succeed? What was the actual sell tax?
5. Reports the result: 'Honeypot' if sell fails or sell tax > 49%, 'Probably safe' if both succeed cleanly with low tax.

This 'simulate then test' approach catches dynamic honeypots that change behavior based on conditions — something static contract analysis (which GoPlus uses) sometimes misses.

How to use Honeypot.is in 30 seconds

1. Copy the token contract address from DexScreener or wherever you found it.
2. Go to honeypot.is (yes, the .is TLD is correct).
3. Select the chain (Ethereum, BNB Chain, Base, Polygon, Arbitrum — Solana support via Solsniffer/RugCheck instead).
4. Paste the contract address. Click Check.
5. Results in 5-10 seconds. Look for: Is Honeypot (Yes/No), Buy Tax %, Sell Tax %, Transfer Tax %.

Reading the Honeypot.is report

Three outcomes:

• Green 'Not a honeypot, looks safe': both buy and sell simulations succeeded with reasonable taxes (under 5%). Token is mechanically tradeable. Doesn't mean it's NOT a rug — team can still drain liquidity — but at least you can sell.
• Yellow 'Suspicious': sell tax 5-49%, or some non-blocking abnormality. Walk away unless you have specific reason to accept the high tax.
• Red 'Honeypot detected' or 'Could not sell': sell simulation failed or sell tax > 49%. Do not buy. Honeypot.is is rarely wrong on this — false positives are < 1%.

Common honeypot patterns Honeypot.is catches

• Hardcoded whitelist — only specific addresses can sell. Most basic pattern.
• Dynamic ownership transfer — contract appears to renounce ownership, but a 'hidden owner' retains transfer-blocking power.
• Reentrancy block on transfer — sells revert for any address that has previously bought.
• Cooldown trap — '1 transaction per 24 hours' that's actually 'never'.
• Tax escalation — sell tax starts at 5%, jumps to 99% after price hits a threshold.
• Liquidity-locked-but-modifiable — LP appears locked but contract has owner-controlled override.

When Honeypot.is gives false negatives

Honeypot.is checks if you CAN sell. It does NOT check:

• Team rug-pull intent — the team can drain liquidity even if the contract is mechanically clean.
• Mint authority — owner might be able to mint unlimited tokens, diluting holders to zero.
• Future contract updates — proxy contracts can change behavior post-launch.
• Time-bombed honeypots — contract behaves normally for 30 days then flips. Hard to detect via simulation.
• Off-chain social engineering — fake team, paid wash trading, hyped social media presence.

Always combine Honeypot.is with GoPlus (broader contract scan) and manual checks: team identity, LP lock proof, holder distribution. Honeypot.is is necessary but not sufficient.

Solana honeypots — different tools needed

Solana tokens use SPL standard, not ERC-20. Honeypot.is doesn't support Solana. For Solana memecoin checks use RugCheck.xyz or SolSniffer.io. These tools check for: mintable supply (owner can dilute), freezable accounts (owner can freeze your tokens), and lp-lock status (analogous concept).

Solana memecoins via Pump.fun have a different structural risk: bonding curves that 'graduate' to Raydium liquidity pools. Pre-graduation tokens are pump.fun-specific risk; post-graduation tokens behave like standard SPL tokens.

If you're already trapped in a honeypot

Accept the loss. The technical reality: you cannot sell. No workaround exists. Trying to 'wait it out' doesn't help — honeypots don't recover.

Tax-wise: in the US, you can claim the loss as a capital loss when the token is determined worthless. Document the buy transaction and the failed sell attempt as evidence. Tax software like Koinly handles this. Don't pay 'recovery services' that promise to retrieve your funds — they are second-stage scams.