What Is a Honeypot Crypto Token?

A honeypot is a token you can buy but cannot sell. The contract is written — or configured — so that ordinary buyers are allowed in, but their attempt to sell is blocked, reverted, or taxed so heavily that exiting is effectively impossible. The bait is a rising chart and easy entry; the trap is the exit.

Honeypots are one of the most common ways new-token buyers lose money, precisely because everything looks fine until you try to leave. The price goes up, other people appear to be buying, and your wallet shows a healthy balance. The problem only reveals itself at the one moment you cannot afford it to.

How a honeypot actually works

There is no single trick. Common mechanisms include:

• A sell that reverts. The transfer logic contains a condition that makes selling fail for everyone except allow-listed addresses (often just the deployer).
• A punishing sell tax. Buying carries a normal fee, but selling is taxed at, say, 99–100%, so a "successful" sale returns almost nothing.
• Trading not enabled. An owner switch must be flipped to allow sells, and it never is for the public.
• Blacklisting. After you buy, the contract can add your address to a list that blocks your transfers.
• Balance manipulation. More advanced contracts show a balance that cannot actually be moved.

Because the trap lives in the sell path, you cannot see it by reading the price chart or the buy side alone. The reliable way to detect it is to simulate a sale against the live contract and see whether it succeeds.

Honeypot vs. rug pull

The two overlap but are not the same. A honeypot blocks the exit from the start — you were never able to sell. A rug pull usually lets you trade normally, then removes the liquidity or dumps supply later. A honeypot is a property of the contract; a rug pull is an event. Some tokens are both. See What Is a Rug Pull for how the two differ.

What flagged high-risk tokens look like

To make this concrete, here are examples flagged by Orixa's public Tokens Flagged as Very High Risk report — a live list generated only from stored scan decisions, not hand-picked. These are flags, not verdicts: a high-risk or honeypot flag reflects the on-chain and simulation evidence available at scan time, it is not proof of intent to defraud, and automated scanners can produce false positives — so read each as a prompt to verify independently, not a final conviction. (Values are as recorded in that report from scans dated 7–10 August 2026, captured 2026-08-21, and can change as tokens are re-scanned.)

• A token presenting as "Tether USD (USDT)" at 0x1395…9008 on Ethereum — not Tether's canonical USDT contract — was flagged at Risk Score 100/100, with a sell-simulation honeypot flag and a single wallet holding effectively the entire supply.
• "United Future World Currency (UFWC)" at 0x4fe1…bc04 on Ethereum was flagged with an extreme reported 100% sell tax — a value at which a sale technically completes but returns almost nothing.
• "Horace" at 0xbefd…f2f8 on Ethereum was flagged via a sell-simulation honeypot result alongside a statistical bytecode model estimating a high malicious probability from its opcode distribution.

The common thread is that each was flagged via the sell path — not the price or the marketing — which is exactly the thing you can test yourself before buying.

How to check before you buy

You do not have to take anyone's word for it. Practically:

1. Confirm the exact contract address from a trusted source — names and symbols are trivial to copy (see the examples above).
2. Run an independent sell simulation using a honeypot-focused tool, and check reported buy/sell taxes.
3. Review owner powers — can trading be disabled, taxes changed, or wallets blacklisted after you buy?
4. Cross-check with a second source. Detectors sometimes disagree, which itself is a signal to slow down.
5. Never "test" an unknown token from your main wallet just to see if it sells.

Orixa runs an independent sell simulation on supported networks as part of its scan, and reports it alongside taxes, owner permissions, liquidity, and holder concentration — so a blocked sell shows up as evidence rather than a surprise. See What Is Orixa and the step-by-step guide, How to Check If a Token Is a Honeypot.

The limits of any check

A sell simulation is a snapshot. A token that sells today can be changed tomorrow if an owner retains the power to alter taxes or trading — so a clean result is a reason to keep monitoring, not to relax. And a failed simulation is not always malice: an illiquid pair, a not-yet-enabled market, or a wrong pool selection can all cause a sale to fail. The right response to any red flag is to investigate the reason, not to guess.

Scan a contract address with Orixa to see the sell-simulation result, taxes, and owner permissions in one report — then confirm the critical findings with a second independent tool. Orixa is decision support, not financial advice or a guarantee of safety.