Warning signal

Suspicious Assembly

Inline assembly manipulates storage directly (sstore/delegatecall/create2).

Analyzer: Source-Code Analysis
Slug: suspicious_assembly

What it means

The source uses assembly blocks containing sstore, sload, mstore, delegatecall or create2. Direct storage manipulation can hide owner addresses, balances or fees where naive readers - and most scanners - never look.

Why it matters

Assembly is how sophisticated scams hide state: an 'owner-less' token whose real controller lives in a raw storage slot, or fees that no public variable reveals.

How RektRadar detects it

Source regex on assembly blocks containing storage/delegation opcodes, raised as warning by the source analyzer.

From our dataset

15,359
tokens carried this flag
9,312
of them classified scam
60.6%
of tokens with this flag end up classified scam
206
flagged in the last 30 days

Top brand-jacked tickers carrying this flag: $USDT, $PENDLE-LPT, $SAOS, $FFROGS, $WETH-EIGEN

Pool version of the flagged tokens that trade: V4 4,707 · V2 906 · V3 427

Snapshot from RektRadar's token_analysis database as of 2026-09-28.

Recent tokens with this signal

Loading recent tokens…

Analyze a token →