Dev.to Security 🔐 Cybersecurity 👁 0 📖 2 min read

What is a honeypot token? The coin you can buy but never sell

This article was generated with AI and is republished from the BlazePhoenix blog. A honeypot token lets you buy but not sell — hidden contract logic traps exits while the chart climbs; a ten-second on-chain check expose

This article was generated with AI and is republished from the BlazePhoenix blog.

A honeypot token lets you buy but not sell — hidden contract logic traps exits while the chart climbs; a ten-second on-chain check exposes most of them.

A honeypot is a token designed to let you in and never out. The chart looks great, buys go through, the price only rises — because almost nobody can sell. The contract has hidden logic: a sell tax of 100%, a whitelist only the creator is on, a max-transaction rule that blocks exits, or a pause switch. You buy, you watch the number climb, and when you try to take profit the transaction reverts or returns dust.

It feels safe precisely because it is engineered to. Rising price plus successful buys is the bait. The trap is on the sell side, where you do not look until it is too late.

How to catch one in ten seconds

The strongest tell is liquidity that is advertised but not really there — or locked so the creator can pull it. Compare the depth the pool claims against the balance its contract actually holds on-chain: open the pool address on a block explorer and read its token balances next to the screener's number. A big gap means the pool cannot pay out what it promises — exactly what a honeypot looks like from the outside.

Then do the cheap tests: buy a tiny amount and immediately try to sell it back. If the sell fails or costs a savage tax, you learned everything for pocket change. Check whether liquidity is locked and for how long, and never trust a token by its ticker — anyone can mint one called "USDC" or "ETH". Verify the address, not the name.

Verify it yourself: for any suspicious token, read the pool's real balance with cast call "balanceOf(address)(uint256)" on a public RPC — if it sits far below the advertised liquidity, the pool claims depth its contract does not hold

Originally published by BlazePhoenix at https://blazephoenix.xyz/learn/what-is-a-honeypot. Text licensed under CC BY 4.0: credit BlazePhoenix with a link to https://blazephoenix.xyz.

📰 Read the original article on Dev.to Security

Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.