You find a token on pump.fun or DexScreener. The chart looks clean. Volume is moving. You buy in — then you try to sell and nothing happens. Your transaction fails. You watch the price crater while your wallet is frozen.
You just hit a honeypot.
Honeypots are one of the most profitable scam mechanics on Solana because they're almost invisible before you buy. This guide explains exactly how they work, what signals expose them on-chain, and how to check any token in under 60 seconds before you commit a single dollar.
🔴 Quick answer: Paste any token address, pump.fun link, or DexScreener URL into @PumporaBot on Telegram. Pumpora checks freeze authority, holder concentration, creator history, and 7 more signals in under 60 seconds — free, no signup.
What Is a Honeypot Token on Solana?
A honeypot is a token designed to look tradeable but secretly prevent selling. The name comes from the trap — you're drawn in by what looks like a sweet opportunity, but once you're in, you can't get out.
On Solana, honeypots typically work through two mechanisms:
- Freeze Authority: The token's creator retains the ability to freeze any wallet's token balance at any time. After enough traders buy in, the creator freezes all non-dev wallets, drains the liquidity pool, and disappears.
- Blacklist/Transfer Restrictions: A custom smart contract adds logic that checks if a wallet is "approved" before allowing a sell. Buys always pass. Sells fail unless the seller is whitelisted — which only the developer is.
Both methods are invisible to the naked eye on pump.fun, DexScreener, or any price tracking tool. They only become visible when you look at the raw token metadata on-chain.
Why DexScreener Doesn't Catch Honeypots
DexScreener is excellent for price discovery. It shows volume, liquidity, trade history, and market cap in real time across 162,000+ pairs. But it shows zero safety signals:
| Signal | DexScreener | Pumpora |
|---|---|---|
| Freeze authority status | Not shown | ✅ Checked |
| Creator wallet history | Not shown | ✅ Checked |
| Bundle detection | Not shown | ✅ Checked |
| Holder concentration | Not shown | ✅ Checked |
| Insider pre-buys | Not shown | ✅ Checked |
| Price / volume / liquidity | ✅ Shown | ✅ Shown |
The same is true for pump.fun. It lists thousands of new tokens daily but has no mechanism to flag freeze authority or other honeypot signals. Tokens explicitly named "SCAM" appear in the trending feed with no warning.
5 On-Chain Signals That Expose Solana Honeypots
1. Active Freeze Authority
What it means: The token's deployer can freeze your wallet balance at any time. On legitimate tokens, freeze authority is revoked immediately after launch — or was never set in the first place.
Red flag: Freeze authority is active and held by the developer wallet days or weeks after launch. This is the clearest single signal of a honeypot risk.
⚠️ Rule of thumb: If a token still has active freeze authority more than 24 hours after launch, treat it as a honeypot candidate until proven otherwise.
2. Extreme Holder Concentration
What it means: The top 10 wallets hold 60–90% of the token supply. In a honeypot, the developer and their controlled wallets hold the vast majority — retail traders hold only small amounts that can't meaningfully sell against the thin liquidity.
Red flag: Top-10 holders control >70% of supply AND most are wallets that bought in the first block.
3. Coordinated Launch Buys (Bundle Detection)
What it means: Multiple wallets buy the token in the exact same block at launch. This is almost never organic — it's a coordinated cluster controlled by one person, designed to manufacture the appearance of demand.
In a honeypot scenario, these bundled wallets are the ones that eventually sell. Retail traders who bought later cannot sell because the contract logic only allows the bundled wallets to execute sell transactions.
4. Creator Wallet With Prior Rug History
What it means: The wallet that deployed this token has deployed and rugged tokens before. Serial rug deployers rotate wallets, but cross-referencing the funding chain (which wallets funded which deployers) reveals the pattern.
Red flag: Creator's funding wallet is linked to 2+ tokens that previously rugged within 48 hours of launch.
5. Suspicious Liquidity Patterns
What it means: The liquidity pool is shallow and controlled by a single provider. When a honeypot plays out, the developer removes all liquidity instantly — but the mechanics are set up in advance. Liquidity added in one transaction by one wallet, with no lock, is a major warning sign.
🟡 Important: No single signal is definitive. A token might have active freeze authority for a legitimate reason. Pumpora's risk score aggregates all 10 signals with calibrated weights to produce a single verdict — CLEAN, LOW RISK, CAUTION, or HIGH RISK.
How to Check Any Solana Token for Honeypot Risk in 60 Seconds
- Open Telegram and search for @PumporaBot
- Send the bot your token address, pump.fun link, DexScreener URL, Birdeye link, or Solscan URL
- Pumpora runs 10 on-chain checks in parallel and returns a risk score and verdict within 60 seconds
- The result shows which specific signals triggered — including freeze authority, bundle detection, and creator history
Check any token now — it's free
3 free scans on your first /start · no signup · no credit card
Open @PumporaBot on Telegram →Real Example: What a Honeypot Scan Looks Like
Here's a typical Pumpora result for a token that turned out to be a honeypot:
🔴 HIGH RISK — 88/100
Token: MOONX · 6p7...3kQm
Verdict: Extreme rug pull probability
━━ Detection Layers ━━
🔴 Creator · 23/25 — Wallet linked to 3 prior rugs (avg time-to-rug: 4h)
🔴 Bundle · 22/25 — 47 wallets bought in block #1 (coordinated cluster)
🟡 Benford · 10/20 — Volume distribution shows wash trading patterns
🔴 Holders · 9/10 — Top 10 wallets hold 84% of supply
🔴 Insiders · 8/10 — 23 wallets entered in launch block (snipers)
🟢 Timing · 3/15 — Launch timing normal
🔴 NLP · 8/15 — "100x guaranteed", "LP forever locked" (unverified)
🟢 Survival · 2/15 — Liquidity model suggests <6h before drain
🟢 Logo · 0/10 — Unique logo (no duplicates found)
🟡 Semantic · 3/10 — Description similar to 2 confirmed scam projects
━━ Key Signals ━━
⚠️ Freeze authority: ACTIVE (not revoked)
⚠️ Liquidity: 1 provider, unlocked, removable instantly
🔍 Scanned for @username · pumpora.netThis token rugged 3 hours after the scan. Freeze authority was used to block all non-dev wallet sells before the developer removed the liquidity pool.
Honeypot vs Rug Pull — What's the Difference?
People often use these terms interchangeably, but there's a meaningful distinction:
- Rug pull: The developer lets you buy and sell freely, but then removes all liquidity suddenly, crashing the price to zero. You could have sold at any point — the scam is the timing.
- Honeypot: The contract or token metadata is engineered so you cannot sell, regardless of liquidity. You're trapped from the moment you buy.
Honeypots are more technically sophisticated and often harder to spot without on-chain analysis. Both are equally destructive to your wallet. Pumpora's breakdown of 2026 rug pull patterns covers the full taxonomy of Solana scam mechanics.
What pump.fun Doesn't Tell You
Pump.fun is a permissionless token launcher — anyone can deploy a token in seconds with no vetting. The platform shows trending coins, volume, and market cap, but provides no freeze authority data, no creator history, and no bundle detection.
This isn't a criticism of pump.fun's design — it's a fast, open marketplace by intention. But it means the safety analysis has to happen elsewhere. That's what Pumpora is for.
✅ The habit that protects you: Before buying any pump.fun or DexScreener token, paste the contract address into @PumporaBot. Takes 60 seconds. It's free. The scan runs while you're still reading the token description.
Summary: Honeypot Checklist
Before buying any Solana token, verify:
- ☐ Freeze authority has been revoked (or was never set)
- ☐ Top-10 holders control less than 50% of supply
- ☐ No coordinated bundle detected at launch
- ☐ Creator wallet has no prior rug history
- ☐ Liquidity has multiple providers or is locked
- ☐ Token description has no high-pressure sales language
Or run one Pumpora scan and get all of the above in 60 seconds.
Frequently Asked Questions
What is a honeypot token on Solana?
A Solana honeypot token allows traders to buy but prevents them from selling. The developer uses freeze authority or custom transfer restrictions to trap funds, then drains the liquidity pool. The result: you can see your token balance but cannot execute a sell transaction.
How do I check if a Solana token is a honeypot?
Paste the token address or any pump.fun/DexScreener URL into @PumporaBot on Telegram. Pumpora checks freeze authority, holder concentration, creator wallet history, bundle detection, and 6 more signals in under 60 seconds. The result includes a clear verdict and a breakdown of which signals triggered.
Does DexScreener show honeypot warnings?
No. DexScreener shows price, volume, liquidity, and transaction data in real time but does not display freeze authority status, creator wallet history, or any honeypot risk signals. A dedicated scanner like Pumpora is required to check those on-chain signals.
Are honeypots common on pump.fun?
Yes. Pump.fun's permissionless token launcher allows anyone to deploy a token in seconds without vetting. Pumpora's analysis shows that tokens with active freeze authority and coordinated launch buys (bundles) are significantly more likely to be honeypots. The platform has no native honeypot detection.
Is Pumpora free to use?
Yes. You get 3 free scans when you first start @PumporaBot — no signup, no credit card. Additional scans can be purchased in-app with the /buy command from $1.19 for a pack of 10 scans.
Related reading: 5 pump.fun Rug Pull Patterns From 2026 · How to Detect a Rug Pull on Solana