Every time you swap, farm or claim on-chain, you sign an approval. Most people forget about them seconds later. The approvals do not forget about you.
To revoke token approvals, connect your wallet to an approval checker like Revoke.cash or your chain’s block explorer, review every active allowance, and cancel the ones you no longer need. Each revoke is a small on-chain transaction, so you pay a little gas. The whole cleanup takes about five minutes.
This guide covers what approvals are, why they are risky, and exactly how to clean them up.
What Is a Token Approval?
A token approval gives a smart contract permission to move a specific token out of your wallet. Without it, a DEX could not swap your USDC and a lending app could not take your deposit.
The permission has two parts. The first is the spender, meaning the contract you approve. The second is the amount it may move.
Here is the catch. Many dApps ask for an unlimited amount by default. That saves you gas on future trades, because you only approve once. It also means the contract can move every unit of that token you ever hold, forever, until you revoke it.
NFTs work the same way. The “set approval for all” permission lets a marketplace move every NFT in a collection. One signature covers the whole set.
Why Old Approvals Are Dangerous
An approval stays active long after you stop using the app. That turns every old signature into a risk you cannot see.
Contracts get hacked. A protocol you trusted in 2023 can get exploited in 2026. If your approval is still open, the attacker can drain that token straight from your wallet.
Drainers disguise themselves as claims. Fake airdrop pages ask you to “claim” a reward. The signature you sign is actually an approval for a drainer contract. Our breakdown of fake crypto airdrops shows how these pages look.
Farmers collect approvals fast. One quest can mean three or four new approvals. Across a full season, an active farmer can pile up dozens. Most of those protocols never get touched again.
Hardware wallets do not solve this. A Ledger protects your keys, but an approval you signed works just the same. Our guide on how to secure your crypto with a cold wallet explains where hardware protection ends.
How to Revoke Token Approvals Step by Step
Revoke.cash is the most popular tool for this. It supports most EVM chains, including Ethereum, Base, Arbitrum and BNB Chain.
1. Open the tool from a trusted source. Type the address yourself or use a bookmark. Scammers clone approval checkers too.
2. Connect your wallet or paste your address. Pasting the address lets you review approvals without connecting. You only need to connect when you revoke.
3. Pick the chain. Approvals live per chain. Check every network you have used, not just Ethereum.
4. Review the list. Each row shows the token, the spender contract and the approved amount. Look hardest at anything marked “unlimited.”
5. Revoke what you do not need. Click revoke and confirm the transaction in your wallet. Each revoke costs a small gas fee.
6. Repeat for your other wallets. Your farming wallets usually hold the messiest lists.
Block explorers offer the same feature. Etherscan, Basescan and BscScan all have a token approval checker page. Some wallets build it in, too. Rabby shows your approvals inside the app, which our Rabby wallet review covers in detail.
Which Approvals Should You Revoke First?
You do not need to revoke everything. Prioritize by risk.
Unlimited approvals on tokens you still hold. These carry the most exposure. A stablecoin approval with no cap is the classic danger.
Protocols you no longer use. Finished a farming campaign? Close every approval from it.
Anything you do not recognize. An unknown spender is a red flag. Revoke first and investigate later.
Contracts from dead or abandoned projects. No team means no one patching bugs.
Approvals for apps you use daily can stay. Just keep them to the tokens you actually trade there.
Watch Out for Permit Signatures
Not every approval is an on-chain transaction. Some tokens support “permit” signatures. You sign an off-chain message, and it works like an approval once someone submits it.
These are harder to spot. The signature costs no gas, so it feels harmless. Drainers love them for exactly that reason.
Uniswap’s Permit2 system adds one more layer. You approve Permit2 once, and it then manages allowances for individual apps. A full cleanup means revoking those app allowances too, not just the main Permit2 approval. Revoke.cash shows both.
The rule is simple. Read every signature request before you sign. If a message mentions “permit” and you did not expect it, reject it.
What About Solana?
Solana works differently. Most apps do not need standing approvals the way EVM apps do. Drainers on Solana usually trick you into signing a malicious transaction on the spot instead.
That makes transaction previews your main defense. Phantom and other Solana wallets simulate each transaction and show what will leave your wallet. Trust that preview. If it shows assets leaving that you did not expect, stop.
How Often Should You Revoke?
Build it into your routine, the same way you check a bank statement.
Monthly cleanup. Five minutes, once a month, across every chain you use.
After every farming campaign. Close the approvals as soon as the points season ends. Our airdrop farming guide covers how to keep a farming wallet clean.
After every claim session. Claim sites carry the highest drainer risk. Revoke within a day of claiming, as our guide to claiming airdrops safely recommends.
Immediately after a suspicious signature. Signed something odd? Revoke right away, then move your funds to a fresh wallet.
What Revoking Cannot Fix
Revoking closes open doors. It does not reverse anything that already happened.
If a drainer already moved your tokens, a revoke will not bring them back. On-chain transfers are final, and recovery is rare. Our guide on whether stolen crypto can be recovered covers the few options that exist.
A leaked seed phrase is a different problem entirely. Anyone with your phrase controls the wallet directly, with no approvals needed. Move everything to a new wallet with a new phrase. Our seed phrase and passphrase guide explains how to protect the new one properly.
Some scams skip approvals altogether. In the Claude trading bot scam, victims deployed and funded malicious contracts themselves. No approval checker would have caught it. Revoking is one layer of security, not the whole stack.
Keep This Content Free
A clean wallet is free protection, and so is supporting this site. If this guide helped you close some open doors, consider signing up on OKX or Bybit with our referral links. It costs you nothing and keeps these guides coming.
Final Words
Every approval you sign stays open until you close it. Most wallets carry dozens of forgotten permissions to contracts nobody maintains anymore. Each one is a quiet risk.
Revoke unlimited approvals first. Clean up after every campaign and claim. Make a monthly check part of your routine. Five minutes of cleanup can save an entire wallet.
Farming this season? Read our take on whether airdrop farming is still safe before you sign your next approval.
FAQ
What does revoking a token approval do?
It cancels a contract’s permission to move tokens from your wallet. The contract can no longer touch that token until you approve it again.
Does revoking token approvals cost money?
Yes, a small gas fee per revoke. On Layer 2 networks like Base or Arbitrum, the fee is usually a few cents.
Is Revoke.cash safe to use?
Revoke.cash is a widely used, open-source tool. Always reach it through a bookmark or by typing the address, since scammers clone popular sites.
Can I revoke approvals on a hardware wallet?
Yes. Connect the hardware wallet to the approval checker and confirm each revoke on the device.
Will revoking get my stolen funds back?
No. Revoking only prevents future transfers. Tokens that already left your wallet are gone.
How often should I check my token approvals?
Once a month, plus after every farming campaign and claim session.
Credit: Source link
