Honeypot meaning in crypto: the token you can buy but cannot sell

What a honeypot is in crypto, the tricks the contracts use, the warning signs to check before buying, a documented case, and the older meanings of the word.

Published: 17 October 2026

What a honeypot means in crypto

A honeypot is a scam token you can buy but cannot sell. Kraken's learning center describes it as a malicious smart contract that restricts which addresses can transfer its token: it typically allows anyone to buy, but only a select address or addresses to sell. Buyers see a price that seems to rise steadily, because nobody else can sell into it. Then the creator, the only wallet allowed out, sells or drains the pool.

The sweetness is the chart; the trap is the code.

How the trap works

Security firm CertiK described the most common tricks in January 2024:

• Blacklists: buyers are added to a list that cannot sell, sometimes behind a harmless-sounding function name.
• Balance changes: the contract resets a buyer's balance to a tiny amount set by the creator.
• Impossible thresholds: selling is allowed only above an amount larger than anyone can hold.
• Sell taxes: a fee on sells so high that a sale returns almost nothing.

On Solana, the same effect can come from an authority rather than custom code. The Solana documentation explains that freezing a token account prevents it from transferring tokens until it is thawed, and that only a mint that still has a freeze authority can do it.

The scale can be industrial. CertiK reported that one actor created 979 honeypot contracts between August and October 2023, roughly one every 30 minutes.

A documented case

The best known example is the SQUID token of 2021, which rode the popularity of a hit television series. CoinMarketCap Academy reported that holders could only sell if they held "marbles" earned in a game that required staking 456 SQUID to enter. On November 1, 2021, the price fell from $2,861.80 to $0.0007926, a drop of 99.9999%.

Warning signs before you buy

• An all-green chart with almost no sells. CertiK flags a sell count of zero or close to it as a major red flag.
• Sells from only one or two wallets. Check that many different holders have sold successfully.
• Unverified contract code, so nobody can read what transfers do.
• An active owner or freeze authority. If someone can still change taxes or freeze accounts, a token that sells today may not sell tomorrow. See renounced.
• Heavy promotion in trading channels for a token nobody can explain.

Scanners that simulate a buy and a sell can flag many of these traps, and Kraken names honeypot.is and RugCheck among them. Treat a pass as a snapshot, not a guarantee.

How honeypot is used

Tone: warning almost always, mock when the victim jokes about it. Forms: "it's a honeypot", "honeypot check", "honeypot scanner", "can't sell, honeypot".

Three illustrative posts (written for this page, not quoted from anyone):

• warning: "Three hundred buys, zero sells, chart is a straight line up. Honeypot."
• warning: "Simulation shows a 99% sell tax. Do not touch it."
• mock: "Tried to take profit, transaction failed three times. I guess I live here now."

Where honeypot comes from

The word is old: Wiktionary lists a pot of honey, a spy who lures targets, and, in computer security, a trap set to detect or deflect unauthorized use of a system. Early smart contract honeypots turned that idea around. A 2019 USENIX Security paper described contracts that look vulnerable, to lure would-be attackers who send funds trying to exploit them, only to have those funds trapped. Its authors found 690 such contracts on Ethereum, 240 victims and more than $90,000 in profit for the creators. When the word shifted to today's buy-only tokens is not documented.

Related terms

• Memecoin slang: the launchpad vocabulary and a checklist for new tokens.
• Rugged: how most honeypots end.
• Renounced: whether anyone can still change the rules.
• CA: the address you paste into a scanner.
• Wallet drainer: the other trap, which takes what you already hold.

Not to be confused with

• A rug pull: you could sell, but the liquidity is gone. See rugged.
• Thin liquidity: you can sell, just at a terrible price. Painful, not a trap.
• A security honeypot: a decoy system defenders set up to catch attackers, the original computing sense.

Sources

• Kraken Learn, Honeypot crypto scams: how they work and keeping yourself safe, 2025
• CertiK, Honeypot scams, 2024
• CoinMarketCap Academy, I lost everything: how Squid Game token collapsed, 2021
• USENIX Security, The art of the scam: demystifying honeypots in Ethereum smart contracts, 2019
• Solana documentation, Freeze account, 2026
• Wiktionary, honeypot, 2026

Questions

What is a honeypot in crypto?

A honeypot is a token designed so that buyers can get in but cannot get out. The contract restricts which addresses are allowed to sell, so the price seems to rise steadily while the creator, the only one who can sell, eventually cashes out.

How can I tell if a token is a honeypot?

Look for successful sells from many different wallets in the token's transaction history. An all-green chart with almost no sells is the classic warning. Token scanners that simulate a sale can also flag sell restrictions or extreme sell taxes, but a clean result is only a snapshot.

Can you get money back from a honeypot?

Usually not through the token itself, because the contract is what blocks the sale. Report the scam to the platform where you found it and, in the U.S., to the FBI's Internet Crime Complaint Center, and be wary of anyone who promises to recover the funds for a fee.

What is the difference between a honeypot and a rug pull?

In a honeypot you cannot sell because the contract stops you. In a rug pull you could sell, but the creators removed the liquidity or dumped their supply, so there is nothing left to sell into. Many honeypots end in a rug.