Is this Solana token a honeypot? How to check sells

November 8, 2026 · 6 min read · by the Rugsight team

A honeypot is a token you can buy but not sell, or can only sell at a huge loss. On Ethereum this usually means hidden logic in the token contract. On Solana most tokens share the same audited token programs, so a creator can't write arbitrary "no selling" code into the token itself. Honeypots still exist, though. They use a short list of built-in controls plus a few market tricks. That makes them easier to check for, if you know where to look.

This guide lists each mechanism, how to check it yourself, and which ones a Rugsight free score flags. Rugsight reads on-chain settings and pool data. It does not simulate a sell, and nothing in this guide proves a token is safe.

The quick answer

Before buying, check these six things. Any one of them can stop you from selling:

1. Freeze authority is set (the issuer can freeze your token account).
2. Token-2022 transfer hook: a custom program runs on every transfer and can reject it.
3. Pausable extension with an active pause authority.
4. Default account state = frozen: new holders start frozen and need the issuer to unfreeze them.
5. Non-transferable extension: the token can't move at all.
6. No real liquidity: there's no pool, or the pool is too thin to absorb your sell.

Two more don't block the sell but take your money: a high transfer fee (a sell tax enforced on-chain) and a permanent delegate (an address that can move or burn tokens from your wallet).

Mechanism by mechanism

1. Freeze authority (classic SPL and Token-2022)

If the mint's freezeAuthority is not null, that key can freeze any holder's token account. A frozen account can't send tokens, so you can't sell. This is the most common Solana honeypot pattern: let buyers in, then freeze them while the insiders sell.

Stablecoins and regulated assets (USDC, for example) keep freeze authority on purpose for compliance. On a fresh meme token there's no good reason for it. Launchpads like pump.fun create tokens with freeze authority already revoked. Details: how to check mint and freeze authority.

Rugsight: flags FREEZE_AUTHORITY_ACTIVE (high) and names the holder when it's a known issuer.

2. Transfer hook (Token-2022)

A transfer hook points to a program that Token-2022 calls on every transfer. That program can enforce royalties or allowlists. It can also reject sells, for example by only allowing transfers from the pool and not to it. You can't tell which by looking at the mint. You'd have to read the hook program, and it may be upgradeable.

Rugsight: flags TRANSFER_HOOK (medium) when a hook program is set. It does not analyse what the hook does. See the Token-2022 guide.

3. Pausable

The Token-2022 pausable extension lets an authority stop all transfers, mints and burns. While paused, nobody can sell.

Rugsight: flags PAUSABLE (medium) when a pause authority is set.

4. Default account state: frozen

With this extension, every new token account starts frozen. Someone with freeze authority has to "thaw" it before it can move tokens. It's meant for KYC'd assets. On a meme token it's a gate the issuer controls.

Rugsight: flags DEFAULT_FROZEN (high).

5. Non-transferable

Soul-bound tokens can't be transferred at all. They're legitimate for badges, but a token with this extension trading on a DEX makes no sense.

Rugsight: flags NON_TRANSFERABLE (high).

6. Liquidity: no pool, thin pool, or removable LP

The simplest "can't sell" situation isn't a setting at all: there's nothing to sell into. Watch for three cases:

• No pool: a token shown in a wallet or an airdrop with no DEX pool can't be sold. Unsolicited airdropped tokens are often bait for a phishing site that "lets you claim or sell".
• Thin pool: with a few thousand dollars of liquidity, a modest sell can move the price by tens of percent.
• Unlocked LP: if the creator holds the LP tokens, they can pull the liquidity, and then nobody can sell. See how to check if Solana LP is locked.

Rugsight: flags NO_LIQUIDITY, LIQUIDITY_VERY_LOW / LOW, and reports whether the main pool's LP is burned or held by verified lockers. Coverage is limited to the pool types and lockers we recognise.

Not a block, but a drain: transfer fee and permanent delegate

• Transfer fee: a Token-2022 fee taken on every transfer, up to a configured maximum. The fee authority can usually raise it later, within limits. A 10–50% fee works like a sell tax. Rugsight flags TRANSFER_FEE (low, under 5%) and HIGH_TRANSFER_FEE (high, 5% or more) using the current fee.
• Permanent delegate: one address can transfer or burn tokens from any account, so it can simply take your tokens. Rugsight flags PERMANENT_DELEGATE (high).

The five-minute manual check

1. Open the mint on an explorer (Solscan or the official Solana Explorer). Read Mint Authority, Freeze Authority and the Token Program. If it says Token-2022, scroll to the extensions list and look for TransferHook, Pausable, DefaultAccountState, NonTransferable, TransferFeeConfig and PermanentDelegate.
2. Look for real sells. On the token's main pool, check recent transactions. You want many different wallets selling successfully, not just buys plus a few sells from one or two addresses. A chart with only green candles and no sells is a warning sign.
3. Quote a sell before you buy. Ask an aggregator (e.g. Jupiter) for a quote to sell the token back to SOL or USDC, and look at the price impact. A quote only shows that a route exists. It doesn't prove the transfer will succeed if a hook or freeze is involved.
4. Test with a tiny amount, if you still want in: buy a few dollars' worth and sell it right away. This is the closest thing to proof, but it only proves selling works now. Freeze authority, a hook or a pause can be used later.
5. Check who holds the controls. A freeze or pause authority held by a known issuer's multisig means something very different from one held by the wallet that deployed the token an hour ago.

What a Rugsight free score can and can't tell you

Paste the mint into the free check. In a few seconds you get a grade with every flag above that applies, read from current on-chain state. That covers the setting-based honeypot mechanisms (1–5), the fee and delegate, and the liquidity picture.

It can't:

• simulate a sell or run a transfer hook program;
• see off-chain tricks (fake front-ends, phishing "claim" sites, fake tokens with the same name or ticker; always check the mint address);
• predict whether an active authority will be used;
• vouch for pools or lockers we don't recognise.

A clean score means none of the known on-chain blocks is present right now. It doesn't mean the token is safe or will hold its value. For the full checklist, read how to check a Solana token for rug-pull risk.

Summary

On Solana, "can I sell this?" mostly comes down to a handful of readable settings (freeze authority, transfer hook, pausable, default-frozen, non-transferable) plus real liquidity. Check them before you buy, confirm that other wallets are actually selling, and treat any active control as a risk for as long as you hold the token.