How to Detect Honeypot Tokens with Honeypot.is (2026 Guide)

What a honeypot token is#

A honeypot token has logic in its contract that prevents most users from selling — or charges a 95–99% sell tax that makes selling pointless. The contract looks normal: buys execute, the chart shows volume, the price "grows." Then when you try to sell, the transaction either reverts or returns near-zero proceeds. You're permanently trapped.

The most common pattern: a whitelist function that allows only specific addresses (the developer's) to sell. Everyone else's sell transactions revert. Variants include time locks ("you can sell after 30 days" that never come), tax-based traps (95% sell tax), and access-controlled functions disguised as standard ERC-20 methods.

How Honeypot.is works#

Honeypot.is runs forked nodes for Ethereum, BNB Chain, Polygon, Base, Arbitrum, and Optimism. When you submit a token contract, it:

1. Simulates a buy from a random address using a small amount of WETH/WBNB.
2. Records: did the buy succeed? What was the actual buy tax?
3. Simulates a sell of those tokens from the same address.
4. Records: did the sell succeed? What was the actual sell tax?
5. Reports: "Honeypot" if sell fails or sell tax > 49%; "Probably safe" if both succeed cleanly with low tax.

The "simulate then test" approach catches dynamic honeypots — ones that change behavior based on conditions — which static contract analysis (what GoPlus uses) sometimes misses.

How to use Honeypot.is in 30 seconds#

1. Copy the token contract address from DexScreener or wherever you found it.
2. Go to honeypot.is (yes, the .is TLD is correct).
3. Select the chain (Ethereum, BNB Chain, Base, Polygon, Arbitrum). For Solana, use RugCheck.xyz or SolSniffer instead — Honeypot.is doesn't cover Solana.
4. Paste the contract address. Click Check.
5. Results in 5–10 seconds. Look at: Is Honeypot (Yes/No), Buy Tax %, Sell Tax %, Transfer Tax %.

Reading the report#

Three possible outcomes:

• 🟢 Green — "Not a honeypot, looks safe" — both buy and sell simulations succeeded with reasonable taxes (under 5%). The token is mechanically tradeable. This does not mean it's not a rug — the team can still drain liquidity — but at least you can sell.
• 🟡 Yellow — "Suspicious" — sell tax 5–49%, or some non-blocking abnormality. Walk away unless you have a specific reason to accept the high tax.
• 🔴 Red — "Honeypot detected" or "Could not sell" — sell simulation failed or sell tax > 49%. Do not buy. Honeypot.is is rarely wrong on this; false positives are under 1%.

Patterns Honeypot.is reliably catches#

• Hardcoded whitelist — only specific addresses can sell.
• Dynamic ownership transfer — contract appears to renounce ownership, but a hidden owner retains transfer-blocking power.
• Reentrancy block on transfer — sells revert for any address that has previously bought.
• Cooldown trap — "1 transaction per 24 hours" that's effectively "never."
• Tax escalation — sell tax starts at 5%, jumps to 99% after price hits a threshold.
• Liquidity-locked-but-modifiable — LP appears locked but the contract has an owner-controlled override.

When Honeypot.is gives false negatives#

The tool checks whether you can sell. It does not check:

• Team rug-pull intent — the team can drain liquidity even on a mechanically clean contract.
• Mint authority — the owner might be able to mint unlimited tokens, diluting holders to zero.
• Future contract updates — proxy contracts can change behavior after launch.
• Time-bombed honeypots — contract behaves normally for 30 days, then flips. Hard to detect via simulation.
• Off-chain social engineering — fake team, paid wash trading, hyped social media.

Always combine Honeypot.is with GoPlus (broader contract scan) and manual checks: team identity, LP-lock proof, holder distribution.

Solana honeypots — different tools needed#

Solana tokens use the SPL standard, not ERC-20. Honeypot.is doesn't support them. For Solana memecoins use RugCheck.xyz or SolSniffer.io. They check for:

• Mintable supply (owner can dilute)
• Freezable accounts (owner can freeze your tokens)
• LP-lock status

Solana memecoins via Pump.fun have a different structural risk: bonding curves that "graduate" to Raydium liquidity pools. Pre-graduation tokens carry pump.fun-specific risk; post-graduation tokens behave like standard SPL tokens.

If you're already trapped in a honeypot#

Accept the loss. The technical reality is that you cannot sell. No workaround exists. Waiting doesn't help — honeypots don't recover.

For taxes (jurisdiction-dependent — Eidode doesn't give tax advice), in the US you can usually claim the loss when the token is determined worthless. Document the buy transaction and the failed sell attempt as evidence. Tools like Koinly handle the bookkeeping.

Don't pay "recovery services." They are second-stage scams targeting honeypot victims.

Bottom line#

Honeypot.is is one of the highest-leverage 30-second checks in crypto. Before buying any new token from DexScreener, Twitter, or a Telegram group, run it through Honeypot.is and GoPlus. If either flags red, walk away — no exceptions. A clean result doesn't make a token safe, but a flagged result almost always means trouble.

Next reads: GoPlus token security · DexScreener beginner guide · Common crypto scams 2026.