Guide · Token security

How to detect a honeypot token
before you buy

Honeypots let you buy a token but stop you from selling, trapping your funds while the chart climbs. Here is how the trap works, the warning signs, and how to verify any token with live on-chain data in seconds.

Scan a token now

Free · No sign-up · EVM · Bitcoin · Solana · Tron

Every scan is powered by the XemaS Semantic Intelligence Platform · answers carry their evidence and coverage state

The trap

What is a honeypot token?

A honeypot is a token whose contract is written so that buying succeeds but selling fails. New buyers push the price up, the chart looks healthy, and then they discover their sell transactions revert or return almost nothing. The money flows in one direction only, into the scammer's liquidity.

The trap is almost never visible from the price chart or the token's marketing. It lives in the contract logic: a sell tax that can be raised to 100%, a blacklist that blocks specific wallets, a "trading enabled" flag only the owner can flip, or an upgradeable proxy that swaps clean code for malicious code after liquidity arrives.

Warning signs

Common honeypot red flags

Extreme or 100% sell tax

Buying works, but the sell tax is set to 90-100%, so any attempt to sell returns almost nothing. Often toggled on after liquidity builds up.

Blacklist / allowlist functions

The contract can flag specific wallets as unable to sell. Early buyers trade freely; everyone else is silently trapped.

Transfer restrictions

maxTxAmount, cooldowns, or "trading not enabled" flags that the owner controls and can flip at will to freeze sells.

Owner-only permissions

Privileged functions (setFee, pause, mint, exclude) still controlled by an externally-owned wallet rather than a renounced or time-locked owner.

Hidden proxy upgradeability

A proxy contract whose implementation can be swapped after launch: a "clean" token today can become a honeypot in one upgrade transaction.

Fake or unlocked liquidity

Liquidity that looks deep but is unlocked, owned by the deployer, or paired against a worthless token, pullable the moment buyers arrive.

Step by step

How to check a token

01

Check the liquidity

Confirm liquidity exists, is paired against a real asset, and is locked or burned. Unlocked LP held by the deployer is the single most common exit vector.

02

Check ownership

Is ownership renounced or behind a timelock/multisig? An active EOA owner with fee and pause powers can turn a token into a honeypot at any time.

03

Check proxy status

If the contract is an upgradeable proxy, the code you read today is not guaranteed to be the code you trade against tomorrow. Resolve the implementation.

04

Simulate a buy and a sell

The decisive test: a buy AND a sell must both succeed. A token where buys pass but sells revert is a honeypot, full stop.

05

Scan the full contract

Combine all of the above into one verdict (sell-simulation, blacklist detection, proxy resolution, ownership, and liquidity) instead of checking each by hand.

What a verdict looks like

One scan, every check

Instead of inspecting each red flag by hand, XemaS resolves them into a single evidence-backed verdict.

Contract verdict
ExampleToken (EVM)
HIGH RISK
Sell simulationFAILED
Blacklist functionDetected
Contract typeUpgradeable proxy
OwnershipActive EOA owner
Liquidity lockUnlocked

Verdict: buys succeed, sells revert. Funds entering this contract cannot be withdrawn. Do not trade.

Illustrative example. Run a real token to see its live verdict.

Before you trade

Scan the token first

Paste any token address and get an instant sell-simulation, blacklist check, proxy resolution, and risk verdict. Free, no account required.

Create free account
FAQ

Honeypot questions, answered