Warning signal

External Call In Transfer

The transfer path calls out to another contract.

Analyzer: Source-Code Analysis
Slug: external_call_in_transfer

What it means

The _transfer implementation performs a .call to an external address. Token behavior now depends on code that may be mutable, unverified, or swappable - outside what any scan of this contract sees.

Why it matters

Externalized logic is how tokens pass source review and simulation, then turn hostile: the called contract changes, the token's behavior changes with it, no transaction ever touches this contract's code.

How RektRadar detects it

Source regex on .call usage within _transfer bodies, raised as warning.

From our dataset

389
tokens carried this flag
225
of them classified scam
57.8%
of tokens with this flag end up classified scam
83
flagged in the last 30 days

Top brand-jacked tickers carrying this flag: $PENDLE-LPT, $SY-reUSDe, $DLTT, $USDT, $FUC

Pool version of the flagged tokens that trade: V4 335 · V2 19 · V3 1

Snapshot from RektRadar's token_analysis database as of 2026-06-20.

Recent tokens with this signal

Loading recent tokens…

Analyze a token →