Honeypot tokens: the chart that only goes up (until you buy)

You find a new token that's up 400% today. The chart is a beautiful green staircase. You buy a little, it keeps climbing, you buy more. Then you try to take profit — and the sell transaction fails. And fails again. Welcome to the honeypot: a token whose contract lets anyone buy but (almost) no one sell.

The trick inside the contract

A token is just a program, and its transfer function can contain any rules its author wants. Honeypots hide conditions like: sells only work from whitelisted addresses (the scammer's), sells above a tiny amount revert, or a "tax" that quietly becomes 100% when you sell. Block explorers and DEX UIs show the price going up because buys work fine — the trap only springs on the way out.

Variations abound: rug pulls where the developer yanks the liquidity pool, hidden mint functions that let them print tokens and dump, and contracts with trading pauses the owner can flip at will. Same family, same ending.

How to spot one before you buy

• Run a honeypot check. Free tools simulate a buy and sell against the contract — if the simulated sell fails, walk away.
• Read the holder list. If a handful of fresh wallets hold most of the supply, the chart is theatre.
• Check the liquidity. Is it locked or burned, or can the deployer withdraw it tonight?
• Beware the perfect chart. A token that only goes up with no red candles is usually a contract that forbids red candles.
• Test with dust first. Buy a tiny amount and immediately try to sell it. A failed test costs cents; a full position costs everything.

The mindset shift

In DeFi, "the price" of a token you can't sell is a fiction. Treat any unaudited, days-old token as guilty until proven innocent: the burden of proof is on the contract, not on your scepticism. If you can't verify you can exit, you haven't made a trade — you've made a donation.

Where CapyGuard helps

Honeypots are usually reached through the same doors as every other scam: lookalike DEX pages, fake "early access" claims, links from impersonator accounts. CapyGuard blocks those doors — known scam domains, lookalike addresses, and the phishing pages that funnel victims toward the token in the first place. The best trade against a honeypot is the one you never open.