Warning signal

External Call In Transfer

The transfer path calls out to another contract.

Analyzer: Source-Code Analysis
Slug: external_call_in_transfer

What it means

The _transfer implementation performs a .call to an external address. Token behavior now depends on code that may be mutable, unverified, or swappable - outside what any scan of this contract sees.

Why it matters

Externalized logic is how tokens pass source review and simulation, then turn hostile: the called contract changes, the token's behavior changes with it, no transaction ever touches this contract's code.

How RektRadar detects it

Source regex on .call usage within _transfer bodies, raised as warning.

From our dataset

420
tokens carried this flag
330
of them classified scam
78.6%
of tokens with this flag end up classified scam
13
flagged in the last 30 days

Top brand-jacked tickers carrying this flag: $PENDLE-LPT, $TOAD, $HORACE, $BOT, $FTR

Pool version of the flagged tokens that trade: V4 371 · V2 22 · V3 3

Snapshot from RektRadar's token_analysis database as of 2026-09-28.

Recent tokens with this signal

Loading recent tokens…

Analyze a token →