Your rug scanner says clean. The token still won't sell.

Originally published at true402.dev/guides/static-scan-vs-honeypot-simulation.

A token can pass a rug-checker and still refuse to sell. The reason is a gap in how most checkers work — they read the contract but never run it. Here's what a static scan can't see, and what a simulation catches.

What a static scan does: read the contract for bad patterns

A static rug scanner (Token Sniffer and most "rug checkers" work this way) reads the contract's bytecode or source and flags known-bad patterns: a mint function, a blacklist, a 100% sell tax, non-renounced ownership, lopsided holder distribution. It's fast, free, and genuinely useful for catching the obvious stuff.

The blind spot: it never runs the trade