Guide

ERC-20 & NFT Approvals: How to Audit and Revoke on EVM

Standing token approvals let contracts move your assets. Learn what to check after a scare, how Revoke.cash fits in, and when a $10 Tracefunds approval audit helps.

What an approval is

When you interact with a DeFi app or NFT marketplace, you often sign an Approval allowing a spender contract to move specific tokens from your wallet up to a limit. Drainers abuse old unlimited approvals months later.

Free steps on EVM

  • Revoke.cash — connect on a trusted device and review token + NFT permissions
  • Etherscan Token Approvals tab for your wallet on Ethereum mainnet
  • After any scare: revoke before moving remaining assets to a new wallet

When Tracefunds adds value

  • $10 approval audit — risk-ranked table across ERC-20 and NFT operators with Revoke.cash deep links
  • Useful when you have many tokens or need a shareable summary for a team
  • Prevention tone — not proof you were hacked today

Solana is different

SPL delegates live on token accounts, not as ERC-20 Approval events. See our Solana SPL delegate guide for Phantom/Solflare cleanup.

Next step

Ready to index your own wallet or transaction on-chain?

Related guides