<p>Revoke.cash is a web application that lets you inspect and remove the token allowances you have granted to dApps and smart contracts. A companion browser extension is also available, but the core tool runs at revoke.cash in any browser. Apps like Uniswap and OpenSea need those permissions to move tokens on your behalf. Leave them open indefinitely and you hand any future attacker a ready-made key to your wallet.</p>



<p><strong><a rel="noreferrer noopener" href="https://revoke.cash/" target="_blank">Revoke.cash</a></strong> allows you to connect the browser extension to inspect and revoke any and allow allowances made by your wallet. It is an essential part of a <a href="https://www.thecoinzone.com/security/crypto-wallet-security" target="_blank" rel="noreferrer noopener"><strong>wallet security</strong></a> toolkit!</p>



<h2 class="wp-block-heading tablecontent">Why Should I Use Revoke.Cash?</h2>



<p>There are a few reasons why you should use Revoke.cash.</p>



<p>Many dApps require users to provide access to their <strong><a rel="noreferrer noopener" href="https://www.thecoinzone.com/security/crypto-wallet" target="_blank">crypto wallets</a></strong> so as to be able to interact with them. For that, users have to manually grant approvals.</p>



<p>Here are some examples of such interactions:</p>



<ul class="wp-block-list">
<li>To swap cryptos on a decentralized exchange such as <a href="https://www.thecoinzone.com/defi/uniswap-v3-the-complete-guide" target="_blank" rel="noreferrer noopener"><strong>Uniswap</strong></a>, you have to <strong>enable this exchange to access your wallet</strong> and pay a small gas fee.</li>



<li>To list an NFT on OpenSea, you have to <strong>grant this marketplace access to the NFT collection</strong> that you store in your wallet.</li>
</ul>



<p>When you deposit into a smart contract, an allowance for exactly that amount would be sufficient. Apps request unlimited allowances instead because it removes friction for repeat users. Fewer pop-ups, fewer gas fees on approvals. Convenient for the app. Risky for you.</p>



<p>An unlimited allowance means the contract can pull any amount from your wallet at any time, not just the amount you intended for that one transaction. One compromised contract can drain everything it has permission to touch.</p>



<p>Granting approval for these actions may look pretty harmless at the first glance. Yet, things are not as secure as they may seem to be.</p>



<p>The key danger lies in <strong>the indefinite lifespan of such approvals</strong>. This means that all of them will remain active until you revoke them yourself.</p>



<p>Without regular cleanups, the approvals will keep accumulating over time. If any of these dApps gets breached, there is a good chance of hackers laying their hands on your wallet through these allowances. </p>



<p>This is why removing excessive permissions matters. Revoke.cash is the tool built specifically for that job.</p>



<p>Still having doubts? Here’s one more reason for you to consider. </p>



<p>High-profile NFT thefts have made headlines repeatedly, including incidents involving <a href="https://variety.com/2022/digital/news/bored-ape-nft-stolen-cameo-1235335733/" data-type="link" data-id="https://variety.com/2022/digital/news/bored-ape-nft-stolen-cameo-1235335733/">Bored Ape Yacht Club holders</a>. Many of those losses came through phishing attacks that tricked owners into signing malicious approvals. Revoking stale permissions before those attacks would not have prevented the signing, but a clean approval list limits blast radius. The fewer active allowances you carry, the less an attacker can reach.</p>



<h2 class="wp-block-heading tablecontent">How To Revoke Token Approvals: Step-by-Step</h2>



<p>Revoke.Cash inspects every contract you have approved to spend tokens on your behalf and lets you remove access for any you no longer need.</p>



<ol class="wp-block-list">
<li><strong>Connect your wallet</strong>. Click the connect button and select one of the supported wallets from the pop-up window. Follow the prompts in your wallet&#x27;s interface to complete the connection.</li>



<li><strong>Review your allowances</strong>. Revoke.Cash displays the full list of dApps and tokens your wallet has approved. Toggle to &quot;NFTs&quot; to see all NFT collections associated with your wallet as well.</li>



<li><strong>Revoke the allowances</strong>. Identify any excessive or unrecognised allowance and click the &quot;Revoke&quot; button next to it. You will need to confirm a new transaction in your wallet and pay a small <a href="https://www.thecoinzone.com/blockchain/storage-load-s-load/">gas fee</a>, the same as any standard on-chain transaction.</li>
</ol>



<h2 class="wp-block-heading tablecontent">Which Approvals Should You Revoke First?</h2>



<p>Not every open allowance is equally dangerous. Prioritize by these three criteria.</p>



<ol class="wp-block-list">
<li>Unlimited allowances to unfamiliar contracts.** If you approved a contract for an unlimited token amount and you no longer use that dApp, revoke it immediately. Unlimited means exactly that.</li>



<li>Approvals to contracts that have been exploited.** Check whether any approved contract has appeared in a hack or rug-pull report. A breached contract with a live allowance to your wallet is an open door.</li>



<li>Old approvals you have not used in 90 days.** Dormant approvals accumulate silently. A 90-day rule is a practical cutoff. Revoke anything older that you cannot identify by name.</li>
</ol>



<p>Start with unlimited approvals. They represent the largest potential loss. Work down from there.</p>



<h2 class="wp-block-heading tablecontent">Is Revoke.Cash Safe?</h2>



<p>Revoke.cash is a legitimate, open-source tool created by Rosco Kalis. The full source code is <a href="https://github.com/RevokeCash/revoke.cash" data-type="link" data-id="https://github.com/RevokeCash/revoke.cash">publicly available on GitHub</a>, so any developer can audit exactly what the tool does and does not do.</p>



<p>Here is what the tool actually requests: it reads your wallet&#x27;s on-chain approval history. It does not ask for your private key. It does not request signing permissions that allow it to move funds. The only transaction it initiates is the one you explicitly trigger by clicking &#x27;Revoke,&#x27; which you then confirm inside your own wallet.</p>



<p>That said, always verify you are on the real site. The correct URL is revoke.cash. Phishing sites mimicking the interface do exist. Bookmark the real URL and use it directly.</p>



<h2 class="wp-block-heading tablecontent">How Often Should You Revoke Approvals?</h2>



<p>There is no single right answer, but a practical schedule exists.</p>



<p>After every major DeFi interaction, check whether the approval you granted was unlimited or capped. If unlimited, revoke it as soon as the transaction is complete. You can always re-approve when you return.</p>



<p>Once a month, run a full audit. Open Revoke.cash, scan your active approvals, and remove anything you do not recognize or no longer use. A 15-minute monthly sweep is enough for most users.</p>



<p>After any major protocol exploit in the news, check immediately. If the breached protocol has an active allowance to your wallet, revoke it before attackers can use it.</p>



<p>Think of it like changing a lock. You would not leave a spare key with a contractor you hired once, two years ago, and never contacted again.</p>



<h2 class="wp-block-heading tablecontent">Revoke.Cash Alternatives: How They Compare</h2>



<p>Revoke.cash is the most widely used tool for this job. A few alternatives exist, though none match its chain coverage or active maintenance.</p>





<p style="margin:0 0 16px 0;font-size:16px">
👉 <strong>Quick takeaway:</strong> Revoke.cash is the most capable active option, covering 80+ EVM chains with batch revoke functionality. Unrekt is a solid second opinion for multi-chain users. Token Allowance Checker appears offline as of 2026 — use it for reference only.
</p>
<div style="overflow-x:auto;margin:0 0 24px 0">
  <table style="width:100%;border-collapse:collapse;font-size:16px;line-height:1.5;min-width:800px;border:1px solid #e5e7eb"><thead><tr style="background-color:#f8fafc;text-align:left"><th style="padding:14px 16px;border-bottom:1px solid #e5e7eb">Tool</th><th style="padding:14px 16px;border-bottom:1px solid #e5e7eb">Supported Chains</th><th style="padding:14px 16px;border-bottom:1px solid #e5e7eb">Key Feature</th><th style="padding:14px 16px;border-bottom:1px solid #e5e7eb">Status</th><th style="padding:14px 16px;border-bottom:1px solid #e5e7eb">Best For</th></tr></thead><tbody><tr><td style="padding:14px 16px;border-bottom:1px solid #e5e7eb"><strong>Revoke.cash</strong></td><td style="padding:14px 16px;border-bottom:1px solid #e5e7eb">
          80+ EVM chains<br/>
          <span style="color:#15803d;font-weight:600">🏆 Broadest chain coverage</span>
        </td><td style="padding:14px 16px;border-bottom:1px solid #e5e7eb">Full allowance dashboard, batch revoke</td><td style="padding:14px 16px;border-bottom:1px solid #e5e7eb">
          <span style="color:#15803d;font-weight:600">🟢 Active</span>
        </td><td style="padding:14px 16px;border-bottom:1px solid #e5e7eb">
          Most users on any EVM chain<br/>
          <span style="color:#15803d;font-weight:600">🏆 Best default choice for EVM users</span>
        </td></tr><tr style="background-color:#fcfcfd"><td style="padding:14px 16px;border-bottom:1px solid #e5e7eb"><strong>Unrekt</strong></td><td style="padding:14px 16px;border-bottom:1px solid #e5e7eb">ETH, BSC, AVAX, and others</td><td style="padding:14px 16px;border-bottom:1px solid #e5e7eb">Multi-chain allowance checker</td><td style="padding:14px 16px;border-bottom:1px solid #e5e7eb">
          <span style="color:#15803d;font-weight:600">🟢 Active</span>
        </td><td style="padding:14px 16px;border-bottom:1px solid #e5e7eb">
          Users wanting a second opinion<br/>
          <span style="color:#15803d;font-weight:600">🏆 Best second-opinion tool</span>
        </td></tr><tr><td style="padding:14px 16px"><strong>Token Allowance Checker</strong></td><td style="padding:14px 16px">Ethereum only</td><td style="padding:14px 16px">ERC-20 approval checker</td><td style="padding:14px 16px">
          <span style="color:#dc2626;font-weight:600">🔴 Appears offline</span>
        </td><td style="padding:14px 16px">
          <span style="color:#d97706;font-weight:600">⚠️ Legacy reference only</span><br/>
          Do not rely on for active use
        </td></tr></tbody></table>
</div>




<p>Premint is not an allowance-revocation tool. It helps NFT creators build allowlists for mints. It does not belong in this comparison.</p>



<p>For most users, Revoke.cash is the clear choice. <a href="https://www.unrekt.net/" data-type="link" data-id="https://www.unrekt.net/">Use Unrekt</a> as a cross-check if you want to verify results on BSC or AVAX.</p>



<h2 class="wp-block-heading">Bottom Line</h2>



<p>Even careful users carry risk. Uniswap and OpenSea have both been hit by exploits, most of them phishing or insider attacks rather than allowance-based drains. The next major exploit might target allowances directly.</p>



<p>The fix takes 10 minutes. Connect your wallet to revoke.cash, scan your approvals, and revoke anything unlimited or unrecognized. Do it once a month. It is the lowest-effort, highest-impact habit in crypto security.</p>

North Korean Developers Inside a Fake DeFi Startup: What Researchers Found

Gnosis Safe Security Checklist: Protect Your Multisig Wallet

How to Store Crypto Safely: Wallets, Seed Phrases, and Threats

What Is a Scam Wick in Crypto?

Revoke.Cash: Remove Wallet Permissions and Protect Your Crypto

Every dApp approval you leave open is a potential attack vector. Learn how to use Revoke.cash to audit and remove token allowances — and how often you should be doing it.