Warning signal

Suspicious Assembly

Inline assembly manipulates storage directly (sstore/delegatecall/create2).

Analyzer: Source-Code Analysis
Slug: suspicious_assembly

What it means

The source uses assembly blocks containing sstore, sload, mstore, delegatecall or create2. Direct storage manipulation can hide owner addresses, balances or fees where naive readers - and most scanners - never look.

Why it matters

Assembly is how sophisticated scams hide state: an 'owner-less' token whose real controller lives in a raw storage slot, or fees that no public variable reveals.

How RektRadar detects it

Source regex on assembly blocks containing storage/delegation opcodes, raised as warning by the source analyzer.

From our dataset

15,722
tokens carried this flag
9,436
of them classified scam
60.0%
of tokens with this flag end up classified scam
439
flagged in the last 30 days

Top brand-jacked tickers carrying this flag: $USDT, $PENDLE-LPT, $SAOS, $WETH-EIGEN, $ysUSDC

Pool version of the flagged tokens that trade: V4 4,011 · V2 866 · V3 342

Snapshot from RektRadar's token_analysis database as of 2026-08-17.

Recent tokens with this signal

Loading recent tokens…

Analyze a token →