← All signals / ← Tous les signaux

Danger signal

Approve With Transfer

The approve function also moves tokens - approvals should never transfer.

Analyzer: Source-Code Analysis
Slug: approve_with_transfer

What it means

The source's approve implementation contains transfer logic. A user signing a routine approval can have tokens moved in the same call - a behavior nothing in the ERC-20 mental model prepares them for.

Why it matters

Wallets and dapps treat approve as harmless metadata. A transferring approve weaponizes that assumption and drains users through the most ordinary interaction in DeFi.

How RektRadar detects it

Source regex on approve bodies containing transfer calls, raised as danger.

From our dataset

11,312
tokens carried this flag
9,712
of them classified scam
85.9%
of tokens with this flag end up classified scam
783
flagged in the last 30 days

Top brand-jacked tickers carrying this flag: $UNI-V2, $YSUBA, $SLP, $WAR, $Laika

Snapshot from RektRadar's token_analysis database as of 2026-06-15.

Recent tokens with this signal

Loading recent tokens…

Analyze a token →

Related signals

Blacklist Mapping - The contract can blacklist any address from selling - a kill-list with no notice period. Owner Not Renounced - The contract still has an owner - nothing prevents a future privileged change. Upgradeable Proxy - The contract is a proxy - its logic can be swapped without users' consent. Proxy Admin Role - An admin role exists and can change the proxy's implementation contract. Beacon Proxy - Multiple contracts share a single upgradeable implementation - one switch rugs all of them.