DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
FREEDOM251

Freedom251 › Blog › Crypto Wallets

How to Revoke Token Approvals and Limit Wallet Exposure on Solana

By Freedom251 Team · · 10 min read

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To revoke an ordinary Solana token approval, remove the delegate from the specific token account that granted it. You can use a wallet’s approval controls, a documented revoker, or the SPL Token CLI. Disconnecting a dApp is a separate action: it ends the app connection but does not clear an on-chain delegate. If your recovery phrase, private key, or signing device may be exposed, move trusted assets to a new wallet with a fresh phrase; revocation alone cannot make a compromised key safe.

What a Solana token approval actually is

On Solana, an approval normally means that a token-account owner authorized another address as a delegate. That delegate can transfer or burn up to the amount approved from that particular token account. It is not automatically a wallet-wide, unlimited allowance across every token you own.

As an Amazon Associate I earn from qualifying purchases.

Each token account stores one current delegate and one delegated amount. If the owner approves a different delegate, the new approval replaces the previous delegate and allowance for that account. The owner signs the approval transaction. Solana’s ApproveChecked variant additionally checks that the mint and token decimals supplied by the caller match the token account.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The practical consequence is that you must identify the affected token account and the delegate recorded on it. Revoking a permission on one account does not change authorities on another account, a mint, or your wallet’s connection list.

#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter | 4Pack Type C Female to A Male Cable Converter for Apple Duo 17 16 15 14 Plus,iWatch Watch 12 11 10,iPad 9 8 Air,Airpods 5 4
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.

Choose the right response before signing anything

Situation Correct action What it does not do
You approved a delegate for a token account and still trust your signing key Submit a Solana Revoke instruction for that token account. It does not disconnect dApps or change mint-level authorities.
An unfamiliar dApp remains connected Disconnect the app in your wallet, then inspect token approvals separately. Disconnecting does not remove an existing delegate.
Your recovery phrase, private key, or signing device may be compromised Create a new wallet with a fresh recovery phrase on a secure device and move trusted remaining assets. Revocation cannot stop the compromised key from signing new transactions.
A token uses Token-2022 PermanentDelegate Identify the mint-level authority and its implications before relying on account-level revocation. An account owner cannot revoke a PermanentDelegate from that account.

Revoke an ordinary approval through a wallet or revoker

Wallet interfaces change, so treat the following as documented routes rather than a guarantee that every current screen looks identical. Confirm the app’s domain, inspect the transaction details, and sign only if the transaction changes the token account and delegate you intend to change.

Phantom’s documented Solana route

  1. Open the Revoker supplied in Phantom’s help instructions, commonly identified there as Famous Fox’s Revoker.
  2. Connect the wallet that owns the token account. Make sure the wallet address shown by the site matches the address you intend to use.
  3. Choose the Solana network and select Revoke all for Solana, or select the individual approval when the interface presents a narrower choice.
  4. Read the wallet confirmation. Check the network, the account being changed, and the requested signature before approving.
  5. Wait for the transaction to confirm, then review the approval list again. A successful revoke should leave no delegate and no delegated amount on the selected account.

This route is a convenience interface for the on-chain Revoke instruction. It is not a substitute for checking what you are signing. If the page redirects to an unexpected domain, requests unrelated permissions, or shows a transaction that does not correspond to the token account you identified, stop and do not sign.

Solflare’s approval settings

  1. Open Solflare and go to Settings → Security and Privacy → Spending Approvals.
  2. Review the listed approvals, including the token account and delegate where the interface displays them.
  3. Select the approval you no longer trust and choose the available revoke control.
  4. Inspect the transaction details in the wallet confirmation and sign only the intended revocation.
  5. Return to Spending Approvals and confirm that the entry has been removed or marked as revoked.

Provider help pages can become outdated as interfaces are redesigned. If the labels differ, use the current security or spending-approval area and verify the transaction itself rather than relying on a button name.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Revoke with the SPL Token CLI

Solana’s official SPL Token CLI documents this form for removing a delegate:

spl-token revoke <TOKEN_ACCOUNT_ADDRESS>

Replace <TOKEN_ACCOUNT_ADDRESS> with the address of the token account that contains the unwanted delegate. The token-account owner signs the revocation for the standard Token Program. Use the keypair and cluster configuration associated with the wallet that owns that account, and confirm the address carefully before submitting.

Rank #2
Sale
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter | USB C Dongle with 90W Max Power Delivery, 3×5Gbps USB A Data Ports, for MacBook, Dell, and More (Charger Not Included)
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

The command invokes the Token Program’s Revoke instruction. It clears the delegate field and resets the delegated amount to zero; it is not a partial reduction of the allowance. Solana’s documentation states: “After revocation, the previous delegate no longer has authority to transfer or burn tokens on behalf of the token account.”

The Token Extension Program documentation also describes a case in which the current delegate can revoke the delegation. Do not generalize that detail to every authority or every wallet workflow; determine which token program and authority apply to the account you are changing.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What revocation changes on-chain

  • The selected token account’s current delegate is cleared.
  • The delegated amount is reset to zero.
  • The former delegate can no longer use that account’s delegate permission to transfer or burn tokens.
  • The action applies to the token account named in the instruction, not automatically to every account holding the same mint.

Revocation does not reverse a transfer that already happened, undo a signature, recover stolen assets, or repair a leaked private key. It limits one existing permission. A transaction that has already been finalized must be treated as final for practical response planning.

Disconnecting a dApp is separate from revoking an approval

A wallet’s connected-app list records an application connection. Disconnecting an unknown app removes that app’s ability to remain connected to the wallet and view wallet data through that connection. It does not edit token-account data on Solana.

An on-chain delegate is different: it is an authority stored in a token account and remains until it is used, replaced, or revoked. Therefore, handle a suspicious interaction in two separate steps:

Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter | 85W Max PD, 2 USB 3.0 & 1 USBC Data Ports, SD/TF Card Reader, for Laptops/Mac and Other Type C Devices (Charger Not Included)
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
  1. Disconnect the unfamiliar or unwanted app in the wallet’s connected-app controls.
  2. Inspect token approvals and revoke delegates you do not recognize or no longer need.

Neither step replaces the other. A wallet can have no connected apps while an old delegate still exists, or have a connected app with no token delegate at all.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not confuse a delegate with other Solana authorities

Solana has several authority roles. Changing one does not automatically change the others.

Role Scope How it differs from a delegate revoke
Token-account owner Controls the individual token account and normally signs its approval and revocation. This is the signer for an ordinary Revoke instruction, not a permission being removed by that instruction.
Token-account delegate May transfer or burn up to the delegated amount from that one token account. Revoke clears this role and its amount.
Mint authority Controls minting for a mint when present. It is a mint-level role, not an allowance on one holder’s token account.
Freeze authority Can freeze token accounts for a mint when present. Revoke does not alter freeze authority.
Close authority Can control closing of a token account when an optional close authority is configured. Revoke does not close the account or remove this authority.
Token-2022 PermanentDelegate A mint-level authority that can transfer or burn tokens from any token account for that mint. The individual token-account owner cannot remove it with Revoke.

Solana’s Set Authority instruction can update one selected authority type on a mint or token account. Setting a selected authority to None permanently removes that role, which is a different and potentially irreversible operation from clearing a delegate.

The Token-2022 PermanentDelegate exception

Token-2022 can add a PermanentDelegate extension to a mint. That authority is assigned at the mint level and can transfer or burn tokens from any token account for that mint. The owner of an individual token account cannot revoke the PermanentDelegate from that account.

If an approval review identifies a PermanentDelegate, do not promise that a normal account-level Revoke will remove it. First establish whether the mint intentionally uses the extension and who controls the mint-level authority. Account-level revocation still addresses an ordinary delegate recorded on the account, but it does not change the mint’s PermanentDelegate configuration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray | Data transfer & Fast charging for MacBook, iPhone 17/16/15, iPad, Samsung Galaxy, Apple Watch
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft

If your wallet or signing key may be compromised

Use a different response when a recovery phrase, private key, or signing device may have been exposed. A compromised key can sign new transactions after you revoke an old delegate, so revocation alone is not containment.

  1. Stop signing. Do not approve additional dApp prompts, message signatures, token transfers, or “verification” transactions from the suspect wallet.
  2. Disconnect unknown apps. Remove unwanted connections, but remember that this does not revoke on-chain delegates.
  3. Assess whether the key is still trustworthy. If only an unwanted delegate is present and the phrase and device remain trusted, revoke that delegate. If the phrase, private key, or device may be exposed, proceed as if the key can authorize transactions.
  4. Create a fresh wallet. Generate it on a secure, malware-free device with a new recovery phrase. Never reuse a phrase suspected of exposure.
  5. Move trusted remaining assets. Transfer assets you still trust to the new wallet, taking care not to interact casually with suspicious tokens or links.
  6. Keep the old wallet isolated. Treat it as compromised even if no further unauthorized transaction appears. Do not return valuable assets to it.

Provider security guidance describes this as reducing further exposure, not recovering funds. Solflare states that stolen funds and finalized transactions cannot be retrieved or reversed. A revoke transaction cannot undo an earlier transfer or make a disclosed private key safe.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Limit exposure before using unfamiliar dApps

Use a dedicated wallet for experimentation

For unfamiliar applications, use a separate burner wallet with its own recovery phrase and only the funds needed for the interaction. Keep long-term holdings in a different wallet. This limits the balance an approval or malicious transaction can reach, although it cannot guarantee safety.

Keep balances intentionally small

Fund the experimental wallet for a specific task rather than treating it as a general treasury. After the task, disconnect the app, review approvals, and move any remaining trusted assets out when appropriate.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Consider offline key storage for future signing

A Solana-compatible hardware wallet can keep private keys on the device while you approve transactions. Phantom describes hardware devices such as Ledger as an additional protection, and Solflare lists Ledger and Keystone among offline key-storage options. Hardware storage is a forward-looking custody measure: it does not revoke existing approvals and cannot cleanse a recovery phrase that has already been exposed. Check current Solana support and availability for any device before purchasing.

Best Value
Sale
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display | 85W Max PD, 1 Powered USB-C 5Gbps & 2 Powered USB-A 3.0 5Gbps Data Ports, for MacBook Pro, MacBook Air, Dell and More (Black)
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.

How to verify that a revoke worked

  1. Record the token-account address before starting; do not rely only on a token symbol, because one wallet can hold multiple accounts for related assets.
  2. Read the wallet confirmation and ensure the operation is a revoke or equivalent approval-removal action for that account.
  3. Wait for confirmation on the same Solana network used by the wallet.
  4. Reopen the wallet’s approval view, or inspect the account with the same tool that showed the delegate.
  5. Confirm that the delegate is absent and the delegated amount is zero.

If the approval still appears, check whether the transaction actually finalized, whether you reviewed a different token account, and whether the entry represents a mint-level authority rather than an ordinary delegate.

Troubleshooting and failure cases

The wallet shows no approval to revoke

You may be looking at the wrong token account, a different wallet address, or an account whose delegate has already been cleared. Match the account address, mint, and network before taking another action.

The dApp still appears after revocation

Revocation changes token-account authority, not the wallet’s connection list. Disconnect the app separately in the wallet’s connected-app settings.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A revoke transaction requests an unexpected action

Reject it. A legitimate revocation should identify the relevant token account and authority change. Recheck the app’s domain and use a current wallet or CLI route rather than signing a transaction you cannot explain.

The approval belongs to a Token-2022 mint

Determine whether the account has an ordinary delegate and whether the mint also carries PermanentDelegate. Revoke the ordinary delegate if appropriate, but do not expect that operation to remove a mint-level PermanentDelegate.

You already signed a malicious transaction

Separate the response into containment and recovery. Disconnect the app and revoke any still-valid delegate if the key remains trusted. If the key or phrase may be compromised, create a fresh wallet and move trusted assets instead. Revocation cannot reverse a completed transfer.

A concise decision checklist

  • Identify the exact wallet, token account, mint, and delegate.
  • Decide whether you are removing an app connection, an on-chain delegate, or both.
  • Check whether the wallet’s signing key and recovery phrase are still trusted.
  • Use the wallet approval route or spl-token revoke <TOKEN_ACCOUNT_ADDRESS> for an ordinary delegate.
  • Inspect the transaction before signing and verify the result afterward.
  • Investigate Token-2022 PermanentDelegate and other mint authorities separately.
  • For a suspected key compromise, migrate to a fresh wallet instead of relying on revocation.
  • Use separate wallets and limited balances for unfamiliar dApps going forward.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Crypto WalletsSolanaSPL Token CLItoken approvalsToken-2022wallet security

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.