Warning signal

External Call In Transfer

The transfer path calls out to another contract.

Analyzer: Source-Code Analysis
Slug: external_call_in_transfer

What it means

The _transfer implementation performs a .call to an external address. Token behavior now depends on code that may be mutable, unverified, or swappable - outside what any scan of this contract sees.

Why it matters

Externalized logic is how tokens pass source review and simulation, then turn hostile: the called contract changes, the token's behavior changes with it, no transaction ever touches this contract's code.

How RektRadar detects it

Source regex on .call usage within _transfer bodies, raised as warning.

From our dataset

381
tokens carried this flag
292
of them classified scam
76.6%
of tokens with this flag end up classified scam
52
flagged in the last 30 days

Top brand-jacked tickers carrying this flag: $PENDLE-LPT, $TOAD, $HORACE, $BOT, $USDT

Pool version of the flagged tokens that trade: V4 325 · V2 21 · V3 2

Snapshot from RektRadar's token_analysis database as of 2026-08-17.

Recent tokens with this signal

Loading recent tokens…

Analyze a token →