Every time you connect your wallet to a new DeFi app and hit “Approve,” you hand a smart contract permission to move your tokens — sometimes an unlimited amount, forever. That one click is behind some of the most expensive wallet drains in crypto, because a forgotten approval can be used by a compromised contract months after you last touched it. The good news: two well-known tools, Revoke.cash and the Etherscan Token Approval Checker, let you see every open approval and close the ones you no longer need.
In this guide you’ll learn what token approvals actually do, how each tool works, where their strengths and limits lie, and a safe step-by-step process for revoking risky approvals. By the end, you’ll know which tool fits your workflow — and how to use them together for the strongest hygiene. Start with the basics in what a token approval is if this is your first encounter with the concept.
id=”why-check-approvals”>Why Token Approvals Matter in the First Place
On Ethereum and other EVM chains, tokens follow a standard that requires you to approve a smart contract before it can move your tokens on your behalf. When you swap tokens on a decentralized exchange, the exchange’s router contract needs an approval (often called an “allowance”) to pull tokens from your wallet. Without it, nothing can be moved — the approval is what makes DeFi work.
The problem is how generous these approvals usually are. Most apps request unlimited approvals — “approve MaxUint256,” the largest possible number — so you only have to sign once and never approve again for that token. That convenience is a double-edged sword. If the contract is later upgraded to something malicious, if its admin keys are compromised, or if you connected to a lookalike site and approved the wrong contract entirely, the attacker can pull your tokens without any further signature from you. You won’t get a wallet popup. The theft happens silently on-chain.
This is not a rare edge case. Security researchers consistently find that wallet drains through stale or malicious approvals are one of the most common ways everyday users lose funds. The pattern is familiar: a user experiments with a new app, grants an approval, forgets about it, and months later the project’s keys leak or the contract is found to contain a backdoor. Because the approval never expired, the funds were still within reach. If you want the full walkthrough of finding your own approvals, see how to check token approvals.
The fix is simple in principle: review your approvals regularly and revoke any you no longer need. Revoking sends a transaction that sets the allowance back to zero, closing the door. It costs a small gas fee on most chains, which is why many people skip it — but compared to the alternative, that fee is cheap insurance. The challenge is visibility: your wallet usually doesn’t show you a neat list of open approvals. That’s exactly the gap that Revoke.cash and Etherscan’s checker fill.
Think of approval hygiene like locking your doors at night. You don’t need to understand the lock’s engineering to benefit from using it — you just need a way to see which doors are open and a quick way to shut them. Both tools give you that visibility, but they approach it differently, and understanding the difference helps you use them well.
What Revoke.cash Does
Revoke.cash is a dedicated approval-management tool built specifically to help users view and revoke token allowances. The workflow is straightforward: you connect your wallet, and the tool scans the chain for all token approvals granted by your address, then presents them in a single list. From there you can select any approval you want to close and send the revoke transaction directly through the site.
Its main strength is focus. Because the entire product is built around one job — managing allowances — the experience is purpose-designed: approvals are displayed clearly, suspicious ones are often flagged or highlighted, and revoking takes one click followed by a wallet confirmation. The tool generally supports many networks, so if you use several EVM chains, you can switch networks and review approvals on each of them in the same interface rather than hunting through different block explorers.
A second strength is education. Revoke.cash is associated with guides and resources about approval safety, which makes it a natural starting point for beginners who don’t yet know what they’re looking at. When you see a list of twenty open approvals for the first time, context matters: which of these are normal? Which are dangerous? A tool that explains what you’re seeing — not just dumps raw data — shortens the learning curve considerably.
There are honest limits to keep in mind. First, any third-party dApp is something you connect your wallet to, so you should always verify you’re on the genuine site — type the address yourself rather than following links, and treat any unsolicited link to an approval tool with deep suspicion (more on this in the warning below). Second, Revoke.cash shows what the chain reports, which means it can only surface allowances that are readable through standard token contracts; exotic or nonstandard approval mechanisms may not appear. Finally, revoking is still an on-chain transaction: you pay gas, and you need to confirm each revoke in your wallet.
What Etherscan’s Approval Checker Does
Etherscan — the long-standing Ethereum block explorer — offers its own token approval checker as part of its toolkit. Rather than being a standalone dApp with a marketing front page, it’s a utility living inside the explorer you may already use to look up transactions, verify contracts, and read on-chain data. The concept is the same: enter an address (yours or anyone’s — it’s read-only, no wallet connection needed) and see the token approvals tied to that address, with options to revoke.
Its standout advantage is that it doesn’t require a wallet connection to inspect approvals. You can paste any address and audit its allowances — your own, a friend’s, or a vault you manage. That’s useful for read-only checks: a quick look at a fresh address before funding it, or confirming that a revoke you sent actually went through, without connecting a wallet anywhere. Because it’s part of Etherscan, it inherits the explorer’s reputation as core Ethereum infrastructure and its deep, chain-accurate data.
Another strength is verification. Etherscan lets you click through from an approval entry to the contract itself, read the contract’s code and verification status, and see its transaction history. If you’re the cautious type who wants to investigate before revoking — or before interacting with a contract at all — having the explorer’s full context one click away is genuinely valuable. It turns an approval list into a starting point for due diligence.
The trade-offs: the interface is functional rather than hand-holding. Etherscan is built for people who are comfortable with raw on-chain data, so a beginner may find the presentation less guided than Revoke.cash’s. Network coverage is also a consideration — Etherscan’s checker is Ethereum-centric (its sister explorers cover other chains, but they’re separate sites), whereas a multi-chain tool consolidates everything in one place. And as with any revoke action, closing an approval costs gas and requires a wallet signature.
One more honest note: Etherscan shows allowances as recorded on-chain, which is authoritative for standard tokens, but the tool won’t warn you about every flavor of risk. A contract with a legitimate-looking approval can still be part of a scam. The checker gives you data; your judgment — and the safety habits in this guide — supply the rest. For the broader picture of spotting compromised infrastructure, how to check if a bridge was hacked covers a related verification mindset.
Revoke.cash vs Etherscan: Side-by-Side Comparison
Neither tool is strictly “better” — they optimize for different users and workflows. Here’s how they compare across the factors that matter most:
| Factor | Revoke.cash | Etherscan Approval Checker |
|---|---|---|
| Purpose | Dedicated approval manager; built for this one job | Utility inside a full block explorer; one tool among many |
| Ease of use | Guided, beginner-friendly list with clear revoke actions | Functional and data-rich, but assumes more comfort with on-chain data |
| Wallet connection | Required — you connect to view and revoke | Not required for viewing; any address can be checked read-only |
| Multi-chain coverage | Designed for many EVM networks in one interface | Ethereum-first; other chains live on separate sister explorers |
| Contract context | Basic; focused on the approval itself | Deep — click through to verified code, holders, and full history |
| Risk flagging | Often highlights suspicious or excessive approvals | Presents data; flags less, expects you to judge |
| Revoke flow | One-click revoke with wallet confirmation | Revoke available; flow is less streamlined |
So which is safer? The honest answer: safety comes mostly from your habits, not from which list you look at. Both tools read the same on-chain allowances, and both can send the same revoke transaction. The risk differences are about workflow, not data quality.
Revoke.cash is safer for beginners in a practical sense: its guided interface makes it far more likely you’ll actually complete a review instead of bouncing off a dense explorer page. A tool you use is infinitely safer than a tool you don’t. Its risk flagging also helps newcomers spot the scariest entries first.
Etherscan’s checker is safer for verification-minded users: the read-only mode means you can audit an address without connecting a wallet to anything, and the deep contract context helps you investigate before you act. If you’re the type who wants to read the contract before trusting the button, Etherscan rewards that instinct.
The strongest setup is both. Use Revoke.cash for your regular cleanup sessions — it’s the fastest way to keep approvals tidy across chains. Use Etherscan when you want to investigate a specific contract, verify a revoke landed, or check an address without connecting a wallet. They complement each other; you don’t have to pick a winner.
How to Revoke Approvals Safely, Step by Step
Revoking is simple, but doing it safely — without breaking apps you use or falling for phishing — deserves a deliberate process. Here’s a routine that works for both tools:
Step 1: Reach the real tool. Type the site address yourself or use a bookmark you created. Double-check the URL character by character. Bookmark hijacking and typosquatting are real, and the cost of landing on a fake is your wallet. This single habit prevents more losses than any tool feature.
Step 2: Connect only what you must. If you’re using Revoke.cash, connect your wallet — but decline any permission beyond what’s needed to read allowances and send revokes. If you’re using Etherscan’s checker, prefer the read-only address lookup for your first pass; only connect when you’re ready to revoke something.
Step 3: Scan for the dangerous entries first. Look for approvals to contracts you don’t recognize, unlimited allowances on tokens you no longer hold, and approvals granted to brand-new or unverified contracts. A huge allowance to a contract you used once six months ago is the classic stale-approval risk — revoke it.
Step 4: Don’t nuke everything blindly. Revoking approvals for apps you actively use means you’ll have to re-approve (and pay gas again) next time. Keep approvals for the two or three apps you use weekly; revoke the long tail of experiments, dead projects, and one-time interactions. If you’re unsure about a contract, investigate it on the block explorer before deciding.
Step 5: Send revokes in batches, calmly. Each revoke is a separate transaction costing gas. On a busy network, batch your revokes and don’t rush signatures. Read each wallet popup: it should show a token approval being set to zero for a specific contract. If the popup shows anything else — a transfer, an unfamiliar method — reject it immediately.
Step 6: Verify afterwards. After revoking, refresh the approval list (or check the address read-only on the explorer) and confirm the allowances now read zero. This closes the loop and catches any transaction that failed silently.
Step 7: Make it a habit. Set a recurring reminder — monthly is a good cadence for active DeFi users, quarterly if you’re mostly holding. Approval hygiene decays because every new app adds new approvals; a regular review keeps the list short and the attack surface small. Pair this routine with the checks in how to check token approvals and you’ll have a solid ongoing practice.
Frequently Asked Questions
The Bottom Line
Revoke.cash and Etherscan’s approval checker solve the same problem — invisible, lingering token approvals — from opposite directions: one is a purpose-built, beginner-friendly manager, the other is a read-only-capable explorer utility with deep contract context. For most people, Revoke.cash is the easier starting point, while Etherscan is the better investigation tool. The safest habit is using both: clean up regularly with the guided tool, verify with the explorer.
Whichever you choose, the tool matters less than the routine. Reach the genuine site, read every wallet popup, keep approvals for apps you actually use, revoke the rest, and repeat monthly. That’s the whole game — and it’s one of the highest-value security habits in crypto.
This guide is for education only — not financial advice.
