What Is a Honeypot Token? The Crypto Scam You Can't Sell
A honeypot token is a coin you can buy but never sell. Learn how the trap is built on Solana and the five checks that expose it before you buy.
What is a honeypot token?
A honeypot token is a scam cryptocurrency designed so buyers can purchase it freely but cannot sell it back, trapping their money inside the token while the creator collects the proceeds. You can buy. You cannot exit. That one-way door is the entire scheme, and everything else about the token exists to hide it.
The name causes confusion because security engineers use the same word for something else entirely. In cybersecurity, a honeypot is a decoy server set up to trap attackers who break into a network. A crypto honeypot flips the target. It traps buyers, ordinary people trying to get out with their own money. Most people who search for what is honeypot crypto do it after their first failed sell, which is the expensive way to learn the term.
A few words need defining before we go further. A token is a digital asset recorded on a blockchain. A wallet is the app that holds your tokens and signs your transactions. Liquidity is the pool of funds a token trades against; without it, nobody can buy or sell anything. Every honeypot abuses at least one of these three. Nothing in this article is investment advice; it is a field guide to one specific scam.
How does a honeypot work?
Buying works exactly as it should, and that is the bait. The token shows up on a trading site, the chart climbs, your purchase clears in seconds. Selling is where the trap closes. The creator has wired the token so that sell attempts fail, get blocked, or lose the entire amount somewhere along the way.
Picture a vending machine that accepts money but has no dispensing slot. Coins go in, the display lights up, nothing ever comes out. A honeypot is that machine with a price chart bolted on top. The chart usually looks spectacular, because a token nobody can sell has zero sell pressure. Every warning sign hides behind a green candle.
The blocking mechanism depends on the blockchain. On some chains it is malicious code inside the token itself. On Solana it is usually a permission or a built-in setting the creator kept for themselves; the next two sections cover both. The outcome is the same everywhere: the door only opens inward. Victims tend to discover this while typing some version of "why can't I sell my token" into a search bar, a few minutes too late.
How do you tell if a token is a honeypot?
Check five things before you buy: the freeze authority (a permission that lets its holder lock your tokens in place), the active Token-2022 extensions, whether real holders have actually sold, whether the liquidity is real, and how the earliest buyers behave. Each check takes about a minute. Together they catch the common honeypot patterns, though no checklist catches every possible trap.
| What to check | What a bad answer looks like |
|---|---|
| Is the freeze authority open, meaning someone still holds it? | An unknown wallet keeps the power to freeze your balance the moment you buy. Revoked is the default for a fair token. |
| Which Token-2022 extensions are active? Token-2022 is Solana's extended token standard with optional built-in features. | A permanent delegate (a wallet that can pull tokens back out of yours), a transfer hook, or a near-total transfer fee is switched on. |
| Have real holders actually sold? Look for genuine sell transactions from ordinary wallets. | The trade history shows only buys, or every sell traces back to wallets connected to the creator. |
| Is the liquidity real and withdrawable? | The pool is tiny next to the token's claimed value, so even a working sell would return pennies. |
| Did unknown wallets all buy at the same moment? | Dozens of fresh wallets bought within the same minute, which points to one operator faking a crowd. |
Two of these checks are painful to do by hand. To read the full holder list and confirm that people outside the team have genuinely sold, pull a holder snapshot of the token. To see whether the early buyers are one operator wearing fifty masks, map the buyer wallets for free and watch how they cluster.
The most practical test costs a few cents: sell a tiny amount before you commit real money. If the small sell fails, never place the large buy.
Is a honeypot even possible on Solana?
Yes, but it is built differently than on Ethereum. Solana has no classic sell-blocking contract, because Solana tokens do not carry custom transfer code the way Ethereum tokens do. The trap gets assembled instead from authorities and extensions, the permissions and optional features a creator attaches when making the token.
On Ethereum, the classic honeypot is a malicious contract. Every Ethereum token ships its own code, so a scammer can write transfer logic that quietly rejects sells or taxes them at 100 percent while leaving the buy path clean. The bait and the trap live in the same program, and only a code review reveals the difference.
Solana removed that particular knife by making every standard token run on shared, audited code. What creators keep instead is a set of levers, and four of them can rebuild the trap:
- An open freeze authority. This permission lets its holder freeze your token account, the slot inside your wallet that stores this specific token. Frozen tokens cannot move, so they cannot be sold.
- A permanent delegate. Under Token-2022, Solana's extended token standard, a creator can appoint a permanent delegate: a wallet with standing power to pull the tokens back out of your wallet at any time, no signature from you required.
- A malicious transfer hook. A transfer hook is a small program that runs on every transfer of the token and can reject the ones its author dislikes, such as anything headed toward a trading pool.
- A confiscatory transfer fee. Token-2022 also supports a built-in fee on every transfer. Set near 100 percent, it lets a sell technically succeed while delivering almost nothing back.
Most of these features exist for honest reasons, and most tokens that use them are legitimate. For the full picture of what the extended standard can and cannot do, read our Token-2022 versus SPL token comparison.
I bought a honeypot. What now?
The honest answer first: the money usually does not come back. Blockchain transactions are final, there is no support desk behind a scam token, and nobody, including the exchange or app you bought through, can force the token to let you sell. Plan around that reality instead of against it.
What you can still do:
- Stop adding money. Some victims buy more, hoping fresh volume will somehow free the token. It will not. The block is deliberate.
- Treat the position as a loss today. Waiting for the creator to grow a conscience only postpones the same conclusion.
- Report the token on the block explorer or the platform where you found it, so it gets flagged before the next buyer arrives.
- Warn the community where the token was promoted. Honeypots die when the bait stops working.
One more trap waits behind the first one. "Recovery services" will offer to retrieve your trapped funds for an upfront fee. They cannot do it; no third party can override the token's own rules. Anyone who reaches out with that promise is running the second act of the same scam.
What is the difference between a honeypot and a rug pull?
A honeypot blocks your sell; a rug pull drains the liquidity you would sell into. In a honeypot the exit door is welded shut. In a rug pull the door swings open onto an empty room, because the creator has already withdrawn the pooled funds that gave the token its price.
The two scams share a lobby, though. Both lean on fake early volume and fresh anonymous wallets, and a honeypot creator often drains whatever liquidity remains once buying slows down. This article covers the honeypot side; for the broader scam checklist, from liquidity locks to creator wallet history, see our guide on how to check a token for a rug pull.
Frequently asked questions
Is this the same honeypot as in cybersecurity?
No. A cybersecurity honeypot is a decoy server that defenders set up to lure and study attackers. A crypto honeypot is a token that lures buyers and blocks their exit. Same word, opposite victims: one traps people breaking in, the other traps people trying to leave.
Can money lost to a honeypot be recovered?
Usually not. On-chain transactions cannot be reversed, and the scammer controls the only mechanisms that could release the tokens. Reporting protects the next buyer, and in rare cases exchanges freeze a scammer's cashed-out funds, but you should not budget for recovery. Ignore anyone selling guaranteed retrieval.
Does a small test sell actually work?
Yes, and it is the most practical single test. Buy a tiny amount, then immediately try to sell it. A honeypot that blocks or confiscates sells will fail this trade just as it would fail a large one. If a few cents cannot exit, your real money cannot either.
Is every token with a freeze authority a honeypot?
No. Freeze authority has legitimate uses: regulated tokens and some stablecoins keep it to comply with sanctions and court orders. An open freeze authority on an anonymous meme token is a red flag; the same authority on an audited, regulated asset is standard practice. Context decides.
Is honeypot crypto as common on Solana as on Ethereum?
The classic contract-code honeypot is mostly an Ethereum problem, since every Ethereum token ships its own code. Solana sees fewer pure honeypots but plenty of freeze and extension abuse, which produces the same trapped-buyer outcome. On both chains the defense is identical: check before you buy.
What should I check before buying a new token?
Five minutes covers it: confirm the freeze authority is revoked, review which Token-2022 extensions are active, pull a holder snapshot to see genuine sells from ordinary wallets, map the buyer wallets for clustering, and run a small test sell. The table earlier in this article shows what a failing answer looks like for each.
