← All signals / ← Tous les signaux

Danger signal

Router-Gated Balance Access

Balance accounting branches on the router/pair address - sells behave differently than buys.

Analyzer: Source-Code Analysis
Slug: router_gated_balance_access

What it means

The source mixes router or pair references directly into balance accounting. Reads and writes differ depending on whether the counterparty is the DEX, the classic shape of buy-works-sell-doesn't.

Why it matters

Asymmetric accounting around the router is the engine room of most honeypots: simulation against the same path the trap checks is the only reliable detector, and this flag explains what the simulation found.

How RektRadar detects it

Source regex on router/pair identifiers adjacent to balance-mapping access, raised as danger.

From our dataset

1,550
tokens carried this flag
1,544
of them classified scam
99.6%
of tokens with this flag end up classified scam
169
flagged in the last 30 days

Top brand-jacked tickers carrying this flag: $WAR, $Laika, $TERAFAB, $Trip, $AGI

Pool version of the flagged tokens that trade: V2 1,334 · V4 214 · V3 27

Snapshot from RektRadar's token_analysis database as of 2026-06-20.

Recent tokens with this signal

Loading recent tokens…

Analyze a token →

Related signals

Blacklist Mapping - The contract can blacklist any address from selling - a kill-list with no notice period. Owner Not Renounced - The contract still has an owner - nothing prevents a future privileged change. Upgradeable Proxy - The contract is a proxy - its logic can be swapped without users' consent. Proxy Admin Role - An admin role exists and can change the proxy's implementation contract. Beacon Proxy - Multiple contracts share a single upgradeable implementation - one switch rugs all of them.