Take Back Control of Your Wallet.
When you use Ethereum dapps you have to grant them permission to spend your tokens. This is called a token approval. If you don't revoke these approvals, the dapp can keep spending your tokens indefinitely. Take back control by revoking the approvals you no longer need.
How To Revoke Your Approvals.
1. Connect
Click Connect Wallet in the top right or enter an Ethereum address in the search bar.
2. Inspect
Inspect your approvals using the sorting and filtering options.
3. Revoke
Revoke the approvals you no longer use to prevent unwanted access to your funds.
Why You Should Use Revoker.
1. Use Revoker periodically.
It's good practice to limit your approvals whenever you're not actively using a dapp. This reduces the risk of losing funds to hacks or exploits and helps mitigate the damage of phishing scams.
2. Use Revoker after getting scammed.
Scammers often try to trick you into granting an approval to your funds. Sort your approvals by most recent to find out which ones are to blame and revoke them to prevent further damage.
3. Stay safe in crypto.
Prevention is better than mitigation. Reviewing what you're about to sign and revoking stale approvals makes you think twice and can save you from phishing scams.
Frequently Asked Questions
- Can I use Revoker to recover stolen assets?
- No. Revoker is a preventative tool that helps you practice good wallet hygiene. Regularly revoking active approvals reduces your chances of falling victim to approval exploits, but it can't recover funds that have already been taken. You should still revoke any approvals used to drain your wallet so they can't take more.
- Do hardware wallets protect me from approval exploits?
- Not from approval exploits. Hardware wallets are safer overall because your keys stay on the device, but approvals don't require anyone to steal your keys to move your tokens. So a hardware wallet offers no extra protection specifically against approval exploits.
- When I add ETH to my account it gets stolen immediately.
- If a bot drains any ETH as soon as it arrives, your seed phrase has been compromised. Revoking approvals won't fix this. The wallet can't recover from a leaked seed phrase, so you should abandon it and create a new one.
- Is it enough to just disconnect my wallet?
- No. Disconnecting your wallet from a site only stops that site from seeing your address. Your approvals stay active regardless, so disconnecting does nothing to protect you from approval exploits.
These are some of the most common questions we get asked. For a full list of FAQs please visit our FAQ page.