Take back control by revoking your allowances.
When using dAPPs like Uniswap or OpenSea or any other dAPP you have to grant them permission to spend your tokens and NFTs. This is called an allowance. If you don't revoke these allowances, the dAPP can spend your tokens forever. Take back control by revoking your allowances.
How To Revoke Your Allowances.
1. Connect
Click Connect Wallet on the top right or enter an address in the search bar.
2. Inspect
Inspect your allowances by using the network selection, sorting and filtering options.
3. Revoke
Revoke the allowances that you no longer use to prevent unwanted access to your funds.
Why You Should Use Revoke.cash
1. Use Revoke.cash periodically.
It is always good to limit your allowances whenever you are not actively using a dapp, especially for NFT marketplaces. This reduces the risk of losing your funds to hacks or exploits and can also help mitigate the damage of phishing scams.
2. Use Revoke.cash after getting scammed.
Very often, scammers try to trick you into granting them an allowance to your funds. Sort your allowances by most recent to find out which allowances are to blame and revoke them to prevent further damage. Unfortunately it is not possible to recover funds that have already been stolen.
3. Use the Revoke.cash browser extension.
Prevention is better than mitigation. The Revoke.cash browser extension warns you when you're about to sign something potentially harmful. This can save you from phishing scams by making you think twice about what you're doing.
Frequently Asked Questions
Q: If I have an "Unlimited" allowance, does that mean my whole wallet is at risk?
- A: No. An "unlimited" allowance only applies to the token or NFT collection that you gave an allowance for. So if you gave an unlimited allowance for your DAI, then all your DAI may be at risk, but none of your USDC. Similarly an "unlimited" allowance for your Bored Apes does not impact your Cool Cats.
Q: Is it enough to "disconnect" my wallet instead of revoking allowances?
- A: No. Disconnecting your wallet (e.g. MetaMask) does not do anything to protect you from allowance exploits - or most other exploits. The only thing that happens when disconnecting your wallet from a website is that that website cannot see your address anymore. But your allowances stay active.
Q: My funds were just stolen, can I use Revoke.cash to get them back?
- A: No. Revoke.cash is a preventative tool that helps you practice proper wallet hygiene. By regularly revoking active allowances you reduce the chances of becoming the victim of allowance exploits. But unfortunately it cannot be used to recover any stolen funds. You should still make sure to revoke the allowances that were used to take your funds so that they cannot steal more in the future.
Q: I want to revoke allowances, but when I add ETH to my account it gets stolen.
- A: If you have a so-called "sweeper bot" on your account that steals any ETH as soon as it comes in, your seed phrase was compromised. This means that revoking allowances is not going to help with your wallet security. Unfortunately, there is no way for your wallet to recover from this. You should abandon this wallet and create a new one.