The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Review token allowances on every network you use, revoke spend permissions you no longer trust, and treat every signing prompt as an authorization request. Revocation prevents future use of an allowance; it does not recover crypto already transferred, and each on-chain revocation may require gas.
What a token approval is—and why it can remain risky
A token approval is a smart-contract permission. It allows a decentralized application (dapp) or its spender contract to move a specified token from your wallet under the terms of the allowance you signed. Approvals are used for ordinary actions such as swaps, lending deposits, liquidity positions and NFT listings.
As an Amazon Associate I earn from qualifying purchases.
Connecting a wallet is not the same as approving a token
When you connect a wallet, a website can usually see the public address and request wallet interactions. An approval is a separate on-chain authorization that gives a spender permission to move a particular token. You can disconnect from a site while that allowance remains active.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteWhy old approvals matter
An allowance can survive the transaction or activity that created it. If a spender later becomes compromised, malicious, or simply no longer deserves trust, it may still have authority until the allowance is reduced or revoked. An approval is therefore an ongoing permission, not a one-time login.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
| Action | What changes | What does not change |
|---|---|---|
| Connect a wallet to a dapp | The dapp can interact with the connected wallet session and request signatures. | Existing token allowances are not automatically removed. |
| Approve a token | A spender receives an allowance for the specified token and amount. | The approval can remain after the original swap, deposit, or listing. |
| Revoke an approval | The allowance is set so the spender cannot use that permission in the future. | A transfer that already executed is not reversed. |
What revoking an approval does—and cannot do
Revoking changes the allowance on the blockchain. Once the revocation transaction is confirmed, the spender can no longer use that particular permission to move the token. MetaMask Help Center describes the result this way: “Revoking an approval/allowance means a dapp can no longer access the contents of your wallet and move them around.”
Revocation is preventive. It does not roll back a completed transfer, restore a drained balance, or undo a malicious transaction. It is also not free by definition: each revocation is an on-chain transaction, and the network may charge gas. If you revoke several allowances on several networks, budget for the transactions on each network separately.
How to revoke a risky approval safely
Use a bookmarked official domain rather than a link sent in a chat, email, or unsolicited “wallet support” message. The following workflow applies whether you use Revoke.cash or the approval-checker page for the relevant chain’s official explorer.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Open the checker from a trusted bookmark.
Go directly to Revoke.cash or to the official explorer’s approval-checker page. Do not enter a seed phrase, private key, or recovery phrase into an approval tool. A checker needs an address and wallet signatures for transactions; it does not need custody of your keys.
- Search for the wallet address.
Revoke.cash supports searching by wallet address. Select the network you want to inspect. If you use an explorer checker, choose the specific chain before reviewing its approvals.
- Read each permission before acting.
For every entry, identify the token, spender contract, allowance amount and network. Also note when the approval was created or last used if the interface provides recency information. Treat an unfamiliar spender, an unlimited allowance, and an approval for a dapp you no longer use as high-priority review items.
- Choose the allowance to remove.
Confirm that you are targeting the correct token and spender. If a dapp is still needed, consider reducing the allowance rather than removing access you expect to use immediately. The safest cap is the smallest amount that completes the task.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.Rank #2
TANGEM Crypto Wallet Pack of 2 – Trusted Cold Storage Hardware Wallet | 100% offline; Bitcoin, Ethereum, NFTs & altcoins; No seed phrase; NFC, Self custody wallet- Seedless by design, nothing to steal: Your private key is generated inside the EAL6+ chip and never leaves it. No seed phrase is shown or typed at setup, so a tampered device, keylogger, or phishing site has nothing to capture. 9+ years, millions of card.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 16,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Backup without a seed phrase: Your wallet is copied to 2 backup cards with end-to-end encryption, so there are no words on paper to lose or leak. Keep them in separate places; if one card is lost, the others restore full access. Optional seed phrase for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
- Select Revoke and confirm the wallet transaction.
The wallet will show an on-chain transaction. Check the network and fee, then approve it in the wallet. A separate transaction may be required for each allowance; a review on one network does not pay for or change approvals on another.
- Wait for confirmation and verify the result.
After the transaction confirms, refresh the approval list and check that the allowance is zero or otherwise reduced to the value you intended. If the entry still shows an active allowance, investigate whether the transaction failed, was submitted on a different network, or changed a different spender than the one you meant to target.
Check every chain separately
Token permissions are network-specific. An Ethereum review does not automatically cover Polygon, BNB Chain, or another EVM network. Repeat the inspection for every chain on which the wallet has interacted with dapps or holds tokens.
Ethereum
Run the wallet address through Revoke.cash or Ethereum’s official explorer approval checker. Review the spender and allowance for each token, then submit and confirm the revocation transaction on Ethereum.
Polygon
Switch the checker to Polygon and repeat the same process. An allowance removed on Ethereum remains unchanged on Polygon because the networks maintain separate contract state.
BNB Chain and other EVM networks
Use the relevant chain’s official explorer checker or select that network in Revoke.cash. Keep a written list of the networks you use so that a completed Ethereum review does not create a false sense that the wallet is fully covered.
How to decide which approvals to revoke first
There is no universal “safe” age or dollar threshold that automatically makes an approval harmless. Prioritize according to exposure and trust:
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
- Unknown spender contracts: Revoke permissions you cannot identify or connect to an activity you knowingly performed.
- Unlimited allowances: An unlimited cap gives the spender a much larger potential range than a task-specific amount. Replace it with a limited approval where the wallet and dapp support that choice.
- Abandoned dapps: If you no longer use the application, its allowance usually provides convenience without a current benefit.
- Recent suspicious activity: Treat an unexpected signature, unfamiliar contract interaction, or sudden balance movement as an incident rather than a routine cleanup.
- Approvals you still need: Keep only the permissions required for current activity, and reduce the cap when a smaller amount will work.
Revoking everything is not always the most practical choice. Revoke.cash’s FAQ notes that choosing approvals to revoke is a trade-off between safety and convenience. The important distinction is deliberate choice: know the spender, token, network and amount instead of leaving permissions indefinitely by default.
What to do if crypto is already moving
If you see a drainer or unauthorized transfer, treat the wallet as potentially compromised and act in this order:
- Stop signing immediately. Close suspicious dapp tabs and reject pending wallet prompts. Do not continue clicking in the hope that a “verification” transaction will fix the problem.
- Protect remaining assets. When it is safe to do so, transfer assets that remain to a clean wallet whose seed phrase has not been exposed. Use a new address and avoid reconnecting that wallet to the suspected site.
- Revoke suspicious allowances. From a trusted device and official checker, remove the permissions that could enable further token transfers. Keep enough native currency on the affected network to pay the required gas, but do not send more funds to a wallet that is actively signing malicious transactions.
- Investigate the signing device and credentials. Check for malware, malicious browser extensions, remote-access software, and phishing pages. If the seed phrase or private key may have been exposed, assume the wallet is permanently unsafe; revoking allowances does not repair a compromised key.
- Preserve evidence. Save transaction hashes, contract addresses, timestamps and the exact site or message that requested the signature. This helps with exchange notifications, wallet support and any reporting process.
MetaMask states that it cannot reverse a transfer already executed by a drainer. Revocation can limit what happens next, but it cannot retrieve assets that have already left the wallet.
Read signing prompts as authorization requests
A signing window that displays token names, amounts, spenders or deadlines is not merely a login screen. It is asking you to authorize an action or permission. Read the complete prompt, verify the domain and confirm that the spender and amount match the task you intended to perform.
Permit2 and “sign message” requests
Some dapps use a signature-based approval flow such as Permit2. A request that says “sign message” can still grant meaningful token authority when the message contains token details, a spender, an amount or an expiry. Treat those fields as carefully as you would an on-chain approval; the absence of a gas charge does not make the authorization harmless.
Why phishing deserves extra caution
MetaMask’s February 2026 Crypto Security Report recorded a 207% rise in “signature phishing” exploits. That figure is a report-specific increase, not a probability that any particular approval will be exploited. It does show why an apparently routine signature deserves the same scrutiny as a transaction.
Never type a seed phrase into a website or share it with someone claiming to be wallet support. Use official wallet and explorer domains, and enable account protections such as two-factor authentication where the service supports them.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Prevention habits that reduce future exposure
Use the smallest practical spending cap
When a wallet offers an allowance limit, choose the amount needed for the immediate swap, deposit, or listing rather than an unlimited approval. A smaller cap narrows what a compromised spender can move under that permission. Some dapps may request a new approval when the cap is exhausted; that extra confirmation is a security checkpoint, not a defect.
Put approval reviews on a recurring schedule
Review active permissions periodically, especially after using a new dapp, participating in an incentive campaign, or signing an unfamiliar prompt. MetaMask gives a monthly check as an example habit, not a universal requirement. Choose an interval you will actually follow and repeat it on every network that holds activity.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteSeparate long-term holdings from active DeFi use
Keep a high-value holding wallet separate from the wallet used for frequent swaps, lending, liquidity, and NFT activity. This limits the amount exposed when an active wallet interacts with an unsafe contract. A hardware or cold wallet can protect the private key from many online threats, but it does not erase allowances already granted by an active wallet; those permissions still need to be reviewed and revoked on-chain.
Harden the signing device
Keep the operating system, browser and wallet software updated. Remove extensions you do not recognize, avoid installing wallet software from advertisements or unsolicited messages, and use endpoint-security controls if malware or phishing on the signing device is a concern. Device security complements on-chain revocation; it cannot replace it.
Revoke.cash and official explorer checkers: what each route provides
| Capability | Revoke.cash | Official chain explorer approval checker |
|---|---|---|
| Starting point | Search by wallet address. | Open the checker for the relevant chain. |
| Network handling | Filter by network. | Review the selected chain; repeat on each network you use. |
| Useful filters | Filter by token, spender and recency. | Not stated by the cited guidance. |
| Revocation method | Select an allowance and confirm an on-chain revocation in the wallet. | Submit the checker’s on-chain revocation transaction in the wallet. |
| Gas | Each revocation may require network gas. | Each revocation may require network gas. |
Neither route changes permissions on a different network. If you use both, treat them as ways to inspect the same underlying on-chain state, not as a guarantee that one review covers every chain or wallet address.
Common mistakes and their fixes
| Mistake | Why it fails | Fix |
|---|---|---|
| Only disconnecting from a dapp | The connection changes, but the existing allowance may remain active. | Inspect and revoke the token permission itself. |
| Checking only Ethereum | Approvals on Polygon, BNB Chain and other networks are separate. | Repeat the review on every network used by the wallet. |
| Signing without reading details | A signature can authorize a spender, amount or deadline even when it looks like a login. | Verify the token, spender, amount, network and expiry before confirming. |
| Expecting revocation to recover stolen funds | Revocation prevents future use but cannot reverse a completed transfer. | Move remaining assets to a clean wallet, revoke permissions and investigate the compromise. |
| Running out of gas halfway through cleanup | Each revocation can be a separate transaction. | Plan gas for every network and verify each transaction after confirmation. |
| Following a “support” link from a stranger | Phishing pages can request a seed phrase or malicious signature. | Start from a trusted bookmark and never disclose recovery credentials. |
| Assuming a hardware wallet removes allowances | Hardware custody protects keys but does not change permissions already granted by the address. | Continue reviewing and revoking allowances on-chain. |
A repeatable wallet-permission checklist
- List every network on which the wallet has used a dapp.
- Open Revoke.cash or each network’s official explorer checker from a trusted bookmark.
- Review the token, spender contract, allowance amount and recency for every entry.
- Revoke unknown, unlimited or no-longer-needed permissions first.
- Use limited caps for approvals you keep.
- Confirm the correct network and budget gas before every revocation.
- Refresh the checker after confirmation and verify the allowance changed as intended.
- Repeat the review after suspicious signatures and on a recurring schedule.
That process addresses the permission itself, rather than relying on a wallet connection setting. It also keeps prevention separate from incident response: revocation closes a future spending path, while a suspected compromise requires protecting remaining assets and examining the device and credentials that produced the signatures.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
