← All signals / ← Tous les signaux

Danger signal

Approve With Transfer

The approve function also moves tokens - approvals should never transfer.

Analyzer: Source-Code Analysis
Slug: approve_with_transfer

What it means

The source's approve implementation contains transfer logic. A user signing a routine approval can have tokens moved in the same call - a behavior nothing in the ERC-20 mental model prepares them for.

Why it matters

Wallets and dapps treat approve as harmless metadata. A transferring approve weaponizes that assumption and drains users through the most ordinary interaction in DeFi.

How RektRadar detects it

Source regex on approve bodies containing transfer calls, raised as danger.

From our dataset

11,486
tokens carried this flag
9,922
of them classified scam
86.4%
of tokens with this flag end up classified scam
717
flagged in the last 30 days

Top brand-jacked tickers carrying this flag: $YSUBA, $UNI-V2, $SLP, $WAR, $Laika

Pool version of the flagged tokens that trade: V2 3,453 · V4 1,995 · V3 248

Snapshot from RektRadar's token_analysis database as of 2026-06-20.

Recent tokens with this signal

Loading recent tokens…

Analyze a token →

Related signals

Blacklist Mapping - The contract can blacklist any address from selling - a kill-list with no notice period. Owner Not Renounced - The contract still has an owner - nothing prevents a future privileged change. Upgradeable Proxy - The contract is a proxy - its logic can be swapped without users' consent. Proxy Admin Role - An admin role exists and can change the proxy's implementation contract. Beacon Proxy - Multiple contracts share a single upgradeable implementation - one switch rugs all of them.