In simple terms — A honeypot is a trap: buying appears possible, but when a victim tries to sell, the contract blocks the transaction or applies conditions that make exiting almost impossible.
The name comes from the image of a jar of honey that attracts a victim. In crypto, it often means a token with malicious logic, not merely a project that loses value. Its displayed price may keep rising precisely because many people can buy while only approved addresses can sell.
Where the restriction can hide
The contract can use a blacklist or whitelist, change the selling fee, apply different rules by address, or call an external contract controlled by the author. Some conditions activate only after launch or for transactions of a certain size. An interface may show a high value, but that value cannot be realized if the token cannot be traded freely.
A successful purchase does not prove that selling works. Nor does a small sale by the author or a favored address prove that everyone has the same permissions. Verified source code helps analysis, but it may still depend on proxies, upgradeable privileges, or external components.
Checks and scanner limitations
Before interacting, verify the correct contract, owner and administrative powers, token distribution, available liquidity, and sales made by independent addresses. A simulation or automated scanner can identify known rules, but it cannot guarantee that the contract will remain unchanged or detect every new kind of logic.
Buying a tiny amount “as a test” still exposes the wallet to the contract and network costs. Do not grant unlimited allowances to unverified dApps. If a sale fails, do not keep increasing slippage or fees without understanding why: a malicious tax may consume the entire amount. A honeypot may accompany a rug pull, cloned website, or wallet drainer, but the mechanisms remain distinct.
Sources
- Why Trick Me — Honeypot Traps on Decentralized Exchanges — Studies tokens that can be bought in DEX pools but cannot be exchanged back for the original asset.
- ESMA — Crypto fraud and scams factsheet — Places common crypto frauds in context and presents basic precautions for users.