Honeypot Contract Detector-and-Warning Tool

WHAT IT DOES

The Honeypot Contract Detector-and-Warning Tool analyzes smart contracts for patterns commonly associated with honeypot scams — contracts designed to let you buy tokens but prevent you from selling them. You specify the contract address and optionally a wallet address and simulated sell amount. The tool reads the contract bytecode, scans for suspicious function selectors (mint, burn, transfer ownership, selfdestruct, proxy patterns), and detects owner privileges. It then calculates a risk score and displays a clear risk level — low, medium, high, or critical — along with detailed findings.

HOW TO USE

Connect your EVM wallet and select your network. Enter the contract address you want to analyze. Optionally provide a wallet address to check balance (leave blank to use your connected wallet). Enter a simulated sell amount to test if selling appears possible. Click "Detect honeypot" to run the analysis. The tool will display the token info (if available), the risk level, detected suspicious patterns, and bytecode length. Results indicate whether the contract shows signs of a honeypot. This is a read-only tool — it never executes transactions.

ONE TECHNICAL SECTION — THE REAL MECHANISM

The tool analyzes contract bytecode by scanning for specific function selectors that indicate honeypot-like behavior. It checks for 0x8da5cb5b (owner() — contract has an owner), 0xf2fde38b (transferOwnership — ownership can change), 0x40c10f19 (mint — supply can be inflated), 0x42966c68 (burn — tokens can be destroyed), 0x3659cfe6/0x5c60da1b (proxy patterns — implementation can be upgraded), and 0x41c0e1b5 (SELFDESTRUCT — contract can self-destruct). Each indicator adds to a risk score. It also checks bytecode length — longer code may indicate complex proxy logic. If token standard functions are readable, it attempts to fetch token metadata and balance. The risk score is mapped to a risk level, providing a quick visual assessment of the contract's trustworthiness.

WHAT IT CANNOT SEE

The tool cannot guarantee detection of all honeypot variants or predict future contract behavior changes. It does not execute transactions, so it cannot confirm whether selling actually works in practice. It cannot detect off-chain honeypot mechanisms, such as front-end manipulation or social engineering. It does not analyze the full contract logic for all possible attack vectors. It cannot detect if the owner will later add malicious functionality or if the contract uses obfuscation to hide suspicious code. The tool also cannot predict contract upgrades or changes in behavior over time.

PLEASE NOTE

This tool is EVM-only and supports Ethereum, Goerli, Sepolia, Optimism, Arbitrum, Polygon, and Base. It does not support Solana, Tron, Starknet, SUI, TON, Aptos, Bitcoin, Cosmos, or XRP. The tool is read-only and does not interact with your wallet's funds. It provides a risk assessment based on bytecode analysis — always conduct your own research before interacting with any contract. A low-risk score does not guarantee the contract is safe. The tool is provided free and as-is; users assume full responsibility for their security decisions.