If a suspicious DeFi approval could let a contract move your tokens, check the correct blockchain network and revoke or reduce that allowance with the wallet that granted it. Revoking is an on-chain transaction and costs a network fee; it can limit future use of that permission, but it cannot recover assets already taken. If your seed phrase or private key is exposed, treat the wallet itself as compromised: approvals are only one part of the response.
First, identify what may be compromised
Three different problems can look like a wallet drain, and they need different responses:
- A risky token approval: A spender contract has permission to transfer a particular token up to an approved amount. That permission can remain after you stop using the dapp.
- A compromised protocol or spender: A contract you previously approved may now be unsafe, including after an upgrade or compromise. Revoking its relevant allowance can prevent further use of that permission.
- A compromised wallet secret or device: If someone has your seed phrase or private key, revoking approvals alone cannot make the wallet safe. Prioritize a carefully planned move of remaining assets to a newly secured wallet.
A wallet that repeatedly loses incoming native tokens as soon as they arrive may have a sweeper bot operating from a compromised key. Do not send fresh gas to that address without a considered recovery plan; the added funds may be taken too.
How to revoke a token approval
- Open a trusted approval checker for the right network. Uniswap Support explains the approval-checking process and links to Etherscan token approvals and Revoke.cash: Uniswap’s token approval guide. Start from a known official help page or explorer address. Avoid search ads and unsolicited direct messages that offer to help recover funds.
- Connect the wallet that granted the approval and select the network. Allowances are specific to a chain, so inspect each network where you used the protocol. Uniswap’s guide lists supported network options in its workflow; available chains and interface labels can change.
- Inspect the token, spender, and allowance before signing. Match the spender address to the suspected protocol or approval. If the suspicious approval was recent, sorting by newest first or filtering the list may make it easier to find; Revoke.cash describes those controls in its approval-revocation instructions.
- Revoke or reduce the allowance. Submit the transaction from the wallet that made the approval and review the network fee. For a standard ERC-20 approval, revoking generally sets the allowance to zero. A wallet may still show an approval-style confirmation because the token’s allowance-setting function is used to set that value; check the transaction details rather than relying only on a generic prompt label. See Revoke.cash’s explanation of token approvals.
- Verify the result. After confirmation, check the transaction and resulting allowance using a reliable checker or explorer. If other networks or tokens may be involved, inspect those separately.
What revoking does—and does not—do
A token approval is an on-chain permission for a spender to transfer the token within the allowance. It is separate from a dapp connection: disconnecting a wallet from a website does not revoke the on-chain allowance. Uniswap makes that distinction in its approval guidance.
Recommended Free Tools
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
- Revoking limits future use of the particular permission once the transaction takes effect; it does not undo transfers that already happened.
- It costs a network transaction fee. If you later want to swap or deposit that token through the same spender, you may need to approve it again.
- Revoking an allowance does not remove tokens already deposited or staked in a protocol. Revoke.cash describes this distinction in its revocation instructions.
- A standard approval checker may not display every non-standard approval type. Revoke.cash notes this limitation in its FAQ; an empty list is not proof that every possible permission is absent.
Which approvals should you prioritize?
If you have many approvals, start with the permissions tied to the current incident, then weigh the token and allowance, whether you still need the approval, the network fee, and whether the checker supports that approval type. Revoke.cash presents revoking versus retaining approvals as a safety-and-convenience trade-off and supports reducing an allowance as well as removing it in its guide.
- Highest priority: A spender implicated in the exploit, or an approval you cannot identify and do not need.
- Consider reducing: A permission you still need but whose allowance is larger than necessary, where the tool and token support changing it.
- Account for the cost: Each revocation requires an on-chain transaction. Avoid blanket assumptions that every approval must always be removed; balance the permission’s risk and usefulness against the fee and potential need to approve again.
What to do if your seed phrase or private key is compromised
Use a newly generated wallet with a new secret and move remaining assets carefully. A hardware wallet can keep the new wallet’s keys on-device and may improve key storage compared with a mobile or browser-based wallet, but it cannot undo exposure of the old seed phrase or revoke that wallet’s smart-contract permissions. Revoke.cash discusses this general security distinction in its hardware-wallet guide.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
If the old address appears to have an active sweeper, adding gas or moving funds through the compromised wallet may simply give the attacker another opportunity. The available evidence here does not establish a universal recovery method for that situation; avoid treating an approval-revocation transaction as a fix for a stolen key.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Keep the scale of approval exploits in perspective
Revoke’s live incident compilation reports more than $494 million stolen since 2020 in incidents it classifies as approval exploits. That is Revoke’s own aggregate, accessed in 2026, not a verified comprehensive industry total; the page can change over time. See Revoke’s exploit compilation.
Quick Recap
Best Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
