So You Got Honeypotted

A honeypot is a malicious smart contract designed to let you buy a token but prevent you from selling it. While a ‘rug pull‘ involves the dev draining the liquidity and leaving you with worthless tokens, a honeypot is more psychological.

It keeps you ‘holding’ a bag of tokens that appear to be mooning, but your ‘exit’ door has been welded shut from the outside.

The 3 Most Common Traps

The BlacklistThe Fee TrapThe Gas Sucker (Social)
The developer adds your wallet address to a ‘blacklist’ the second you buy. Everyone else can see the price rise, but only the dev’s ‘whitelist’ addresses can sell.The contract has a hidden sellTax set to 99% or 100%. If you try to sell $1K, the contract takes $1K as a ‘fee.’A ‘naive’ stranger shares a seed phrase to a wallet with $5K in $USDT. You try to move it, but realize there’s no $ETH for gas. You send $20 in ETH, and it’s instantly stolen by a sweeper bot.

I’m Stuck. Now What?

We have to be candid here: In 99% of cases, the money is gone. Because the blockchain is immutable, there is no undo button. However, there are a few diagnostic steps to take:

1. The ‘Small Sell’ Test

Sometimes, a contract isn’t a total honeypot but has a Max Sell Limit. Try selling a tiny amount (e.g., $1 worth). If that fails too, the exit is truly blocked.

2. Check the ‘Tax’ on a Tool Like TokenSniffer

Paste the contract address into a tool like TokenSniffer or Honeypot.is. It will tell you if the contract contains the _isHoneypot flag or if the sell tax is set to a predatory level.

3. Revoke Permissions

If you ‘Approved’ the token for trading on a DEX, go to a tool like Revoke.cash or the ‘Token Approvals’ checker on Etherscan. Revoke the spend limit immediately. While the tokens you bought are lost, you want to ensure the malicious contract doesn’t have ‘Infinite Approval’ to reach back into your wallet and grab your remaining $ETH or stablecoins later.

Can I Get a Refund?

Unless the project was a mistake by a legitimate team (extremely rare), no one is going to refund you.

Warning: Anyone in your DMs or on X claiming they are a ‘Recovery Expert’ or can ‘hack the contract’ to get your money back is another scammer. They are ‘Recovery Phishers’ looking to kick you while you’re down.

How to Spot the Next One

  • The ‘All Green’ Chart: If a chart has 500 buys and 0 sells, it’s not the next Bitcoin. It’s a honeypot.
  • Unverified Source Code: If the ‘Contract’ tab on Etherscan doesn’t have a green checkmark, don’t touch it.
  • The ‘Comment’ Section: Check the ‘Comments’ tab on the block explorer. Usually, you’ll see 20 people screaming ‘CANT SELL’ within minutes of a launch.

Pro Tip: Before buying a “moonshot,” always check the Liquidity Lock. If the liquidity isn’t locked AND the contract isn’t verified, you are essentially donating your money to a scammer’s vacation fund.

Our mission here at RugDoc is to screen for hard rug code that results in 100% theft of ALL underlying funds for ALL participants.

This is the ONE part of the due diligence process that most people cannot simply do on their own as it costs thousands of dollars to hire a senior solidity developer to look over a farm for safety.

A project coin with terrible code can go up in price, and a project with good code and a good team can also go down in price.

Do NOT use our ratings to refer to your likelihood in making money if you invest in the project. They are ONLY in reference to code safety.

Everything else beyond code safety is YOUR responsibility to go do research on. We just make sure the casino you’re betting in won’t rob you before you even get to place a bet.

Our reviews for projects are organized into a few colors.

🟢 Least Risk
These projects are the least likely to hard or soft rug. Usually reserved for cornerstone projects of an ecosystem where it makes no financial sense for them to rug in any manner as they make more money just being legit.

🔵 Low Risk
These projects are usually established projects in an ecosystem that have a track record of success or have KYC’d to us or other authoritative sources in the real world. As a result, it is extremely unlikely for them to soft rug or hard rug their projects. The projects can still fail and the token price can go down, but usually more as a result of natural market forces.

⚪️ Some Risk
This is the default rating for projects with unknown teams but have code that is unlikely to have hard rug risk. Since the team is unknown and doesn’t have a track record of success, it’s entirely possible that they may try to soft rug by dumping tokens, abandoning the project, etc. Even a last minute contract swap to a malicious contract is possible. The only thing that is unlikely is a complete hard rug as long as you are 100% sure you deposit into the contract we review.

🟠 Medium Risk
Similar to Some Risk, but the underlying code itself is custom enough or complex enough that it warrants an elevated risk rating that needs deeper research. Make sure you read every point presented to make sure you’re comfortable with that before entering. Still unlikely to hard rug, but more chances of custom code behaving incorrectly and causing other issues.

🔴 High Risk
Project contains code or practices that are HIGHLY LIKELY to lead to catastrophic losses as they are right now. Make sure you read the description carefully as we will always warn what these issues are. If you see the words Hard Rug anywhere in the review, STAY FAR AWAY!

⚫️ Not Eligible
We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours. Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Search

🟢 For owners who have made impactful changes and would like an update to their farm review:

1️⃣ Use #update at @RugDocChat with your description and proof of changes and it will be forwarded to our scanners.

2️⃣ This does not guarantee a change in your review.

3️⃣ Owners who have difficulty solving the issues can consider our Consultation Package - please contact @BaymaxCrypto on Telegram to discuss.