A technical inventory of what the ledger allows this account to do. Not a safety judgment — none of these facts, alone or in combination, mean "safe" or "unsafe." The absence of a capability here is also not a reassurance.
Freeze capability
This issuer has permanently disabled the freeze capability. This flag cannot be reversed by the account itself.
A technical commitment about what the account can do, not a safety signal. Tokens run by bad actors can lack freeze too.
Source: XRPL AccountRoot.Flags (via AccountInfo)
Master key
The account's master private key has been disabled. Transactions must be signed by an alternative key (RegularKey or SignerList).
Common on production custody setups; also seen on some compromised accounts. Presence alone is not a signal.
Source: XRPL AccountRoot.Flags (via AccountInfo)
RegularKey
A RegularKey (rrrrrr…LvTp) is configured, providing an alternative signing key.
Standard ledger pattern for key rotation and hot/cold separation.