Honeypot token

A honeypot token is a malicious smart contract engineered to attract buyers while making it impossible for them to sell. The contract may hide transfer restrictions, hidden fees set to 100%, or a blacklist that the deployer toggles after enough people have bought in. On a price chart the token often appears to only rise, because sell orders keep failing, which lures more victims until the creator drains the pooled liquidity.

Why it matters

Honeypots exploit the fact that most buyers never read contract code before trading. Because the deception lives in logic rather than marketing, a token can look legitimate, have a live pair on a decentralised exchange, and still be a trap. Treating an unaudited contract as safe simply because you can buy it is a costly assumption. Reviewing the contract, testing a tiny sell, and checking whether the deployer holds special permissions are basic defences. Automated scanners that simulate a sell can flag many honeypots, but attackers adapt their code to evade them, so a passing scan is reassuring rather than conclusive and should be combined with caution about newly launched, heavily promoted tokens.

Common misunderstanding

People assume a rising price and active trading prove a token is safe to hold. In a honeypot those signals are manufactured: buys succeed and sells revert, so the chart only climbs. A rising price is not proof you can exit. The only reliable test is whether ordinary holders can sell, which the contract’s code determines.

Related terms

See dApp, liquidity pool, ERC-20 and blind signing.