Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesIf a crypto exploit may involve a contract you approved, check and revoke its token or NFT permissions on the affected network as soon as you can. Disconnecting a wallet from a website does not remove an on-chain approval. If your recovery phrase or private key may be exposed, move remaining assets to a new secure wallet as well: revoking approvals cannot make a compromised key safe.
First determine whether the problem is an approval or a compromised wallet
A token approval, also called an allowance, lets a smart contract spend specified tokens from your wallet. An NFT approval can give a contract or address permission to transfer one or more NFTs. These permissions are recorded on-chain.
As an Amazon Associate I earn from qualifying purchases.
Disconnecting a wallet from a dapp changes its connection to that site; it does not cancel an allowance already granted. An old approval can remain active after you stop using a protocol, and an exploited contract may abuse it later. MetaMask explains the risk of unlimited permissions if a contract is exploited or malicious: MetaMask’s token-approval guide.
Consider what the incident suggests:
- Likely approval abuse: losses appear linked to a particular protocol or spender, but there is no sign that someone controls your wallet key. Inspect approvals on the affected chain and revoke suspicious permissions.
- Possible key or device compromise: your recovery phrase or private key was shared, entered into a fake site, or exposed to malware or a fake wallet extension—or transactions continue without your involvement. Revocation alone is not enough. MetaMask lists these among possible causes of unauthorized transactions: what to do if you get scammed.
Respond in this order
- If your key may be exposed, prioritize a new wallet. Create a new wallet with a new recovery phrase, then move remaining assets if it is safe to do so. Ethereum.org advises moving funds to a new secure wallet and revoking malicious approvals: its revocation guide. MetaMask similarly advises discontinuing use of the compromised wallet and accounts tied to its Secret Recovery Phrase: MetaMask’s incident guidance. If a sweeper steals new deposits as soon as they arrive, Revoke.cash says the seed phrase is compromised; do not keep sending funds to the old wallet to pay gas: Revoke.cash’s compromised-wallet guidance.
- Check every affected network. Choose the same chain that contains the approval. A checker set to Ethereum Mainnet will not show an approval on Polygon, for example. Treat each network as a separate check; a list for one chain is not a wallet-wide inventory.
- Inspect the permission and spender. Use a reputable explorer approval checker, wallet interface, or established revocation tool. Check the chain, token or NFT, spender contract address, and permission or allowance amount. Start with the exploited spender, then review unknown, unused, or unlimited permissions. Do not rely only on a dapp name displayed in a wallet; confirm the contract address where possible.
- Submit the revocation transaction. Revoking is an on-chain transaction and requires a network fee. For an ERC-20 token, revocation sets the allowance to zero. For NFT approvals, it removes the relevant spender permission or sets the approval to false. The wallet prompt may still say “approve” because the same contract function changes the permission value. Read the details carefully and do not sign a new positive or unlimited approval when you intend to revoke.
- Verify the change after confirmation. Wait a few minutes, refresh the checker, and reconnect to the same network. Ethereum.org advises refreshing the revocation tool and checking that the revoked contract has disappeared from the list.
- Keep an incident record. Save transaction hashes, wallet and spender addresses, screenshots, and relevant communications. Ethereum.org provides reporting options for scam addresses and websites; report to appropriate authorities where relevant. A revocation does not reverse a transfer that has already completed.
Choose an approval checker that covers the right permission
Ethereum.org names Revoke.cash, Revokescout through Blockscout, and Etherscan’s Token Approval Checker among the available options. MetaMask also lists supported explorer checkers and wallet tools in its token-approval guidance. Services can change their network coverage, so confirm support for the specific chain before connecting.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Compare tools by whether they support the affected network, show the relevant token allowances and NFT approvals, identify the spender and permission clearly, submit revocations through a wallet transaction, and let you refresh the result afterward. A checker that does not cover the affected chain or approval type cannot establish that permission is absent.
Some older NFT collections may not emit the indexed approval events that standard indexers rely on, so a standard checker may miss an approval. If you are concerned about a particular NFT permission that does not appear, check the collection interface or a relevant explorer as well. Revoke.cash describes this limitation in its approval guidance.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Know what revocation can—and cannot—do
Revocation reduces remaining exposure; it does not recover stolen assets. Self-custodial transactions generally cannot be reversed by a wallet provider, and Revoke.cash cannot restore assets already taken. Revoking an allowance also does not withdraw tokens you deposited or staked in a protocol. If you later use a function that needs the spender, you may have to grant a new allowance.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Do not assume every approval is malicious. Some active NFT listings rely on an approval to let a marketplace transfer an item when it sells. Removing permissions can interrupt activity you intended. Prioritize the exploited, unknown, unnecessary, and unlimited permissions, then consider the convenience impact before removing approvals you still need.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Examples of approval-related incidents
Revoke.cash’s maintained incident list reports that about $13.4 million was stolen from SwapNet users on January 25, 2026, after an attacker abused approvals granted directly to SwapNet; it advises users who granted those approvals to revoke them. It also reports about $3.6 million stolen from Arcadia Finance users on July 15, 2025, and says Arcadia advised users to revoke approvals and disable active automations. These are figures and descriptions from Revoke.cash’s incident reports, not independently audited totals: Revoke.cash’s incident list.
These incidents illustrate why a permission can remain important after a user stops interacting with a protocol. They do not establish how common approval abuse is across crypto as a whole.
Quick Recap
Best Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →
