What is a honeypot?
In short
A honeypot in crypto is a trap that lures users with apparent profit, such as a token that can be bought but not sold, or a wallet from which they can’t withdraw the funds they see.
Imagine a shop that lets you walk in and pay, but has locked the exit. That’s roughly how a typical crypto honeypot works: everything looks normal until you try to get your money back. The name literally means a “pot of honey,” in other words an attractive bait.
In the case of a token, the trap usually sits in the smart contract, the code that defines its rules. It may allow buys but block sells for everyone except specific addresses. Other variants impose such a high sell fee that exiting becomes practically pointless. The chart may keep going up precisely because buyers can’t sell.
Why it matters
The balance you see in your wallet doesn’t prove you can cash it out. A token can show up normally on a decentralized exchange (DEX), have trades and a seemingly impressive valuation, without offering most holders a real way out.
There’s also the wallet trap. Someone posts a seed phrase (recovery phrase), supposedly by mistake, for a wallet that holds tokens but not the coin needed for network fees. Anyone who sends funds to cover those fees may see them instantly moved elsewhere by the scammer’s bot, without ever managing to move the tokens.
What to watch out for
Honeypot checkers can spot suspicious restrictions, but they’re not a guarantee of safety. The owner may be able to change the rules later or exempt certain addresses. Even a successful small sell doesn’t prove that later ones will be allowed.
We separate checking the code and the owner’s privileges from a team’s assurances on social media. Also, a failed sell doesn’t on its own prove a honeypot: insufficient liquidity or the transaction settings may be to blame.
In cybersecurity, the same term is also used for decoy systems that researchers set up to observe attacks. There the purpose is defensive, not to deceive users.