Frequently Asked Questions
No. Revoke.cash is a preventative tool that helps you practice proper wallet hygiene. By regularly revoking active approvals you reduce the chances of becoming the victim of approval exploits. But unfortunately it cannot be used to recover any stolen funds. You should still make sure to revoke the approvals that were used to take your funds so that they cannot steal more in the future.
No. The way approvals work under the hood requires 1 transaction per approval. So it is technically impossible to revoke multiple approvals in a single transaction.
If you have a so-called "sweeper bot" on your account that steals any ETH as soon as it comes in, your seed phrase was compromised. This means that revoking approvals is not going to help with your wallet security. Unfortunately, there is no way for your wallet to recover from this. You should abandon this wallet and create a new one.
No. Disconnecting your wallet (e.g. MetaMask) does not do anything to protect you from approval exploits - or most other exploits. The only thing that happens when disconnecting your wallet from a website is that that website cannot see your address anymore. But your approvals stay active.
No. In general, hardware wallets are much safer than mobile or browser-based wallets because the wallet's keys are securely stored on the device, making it impossible to steal the keys without proper access to the device. But with approvals no one needs to steal your keys to take your tokens. And because of that hardware wallets offer no extra protection against approval exploits.
Revoke.cash is provided as a free service, but every revoke transaction incurs a gas fee just like other blockchain transactions. This is usually quite cheap, but when gas fees rise it can get more expensive. If your transactions are not time sensitive, it may be wise to use services like GasHawk to reduce gas fees.
In the tokens' smart contracts, the functions for approving and revoking approvals are the same function. The difference is that you set the approval to 0 (for ERC20 tokens) or "false" (for NFTs) when revoking the approval. You can verify that Revoke.cash is actually revoking the approval by clicking "Edit Permission" (for ERC20 tokens), or the "data" tab (for NFTs) in MetaMask.
Revoking approvals has no impact on your deposited or staked tokens. These tokens will stay deposited and you will still be able to withdraw them. However, if you want to add more tokens to your deposited position, you will need to grant an approval again.
Choosing which approvals to revoke is always a trade-off between safety and convenience. For certain well-known protocols (e.g. Uniswap) it is most likely fine to leave approvals active, but for newer and unknown smart contracts, it is more prudent to revoke approvals. Also keep in mind that some use cases require you to keep your approvals active. For example, if you have active listings on OpenSea you need to keep the approvals in order for the listings to remain active.
Generally you don't need to revoke token approvals on testnets, because tokens on testnets do not have any value. Every individual token approval only applies to a single token on a single network. So token approvals on testnets are not a security risk for your mainnet tokens.
The Revoke.cash browser extension supports every EVM network. The Revoke.cash website supports a large number of EVM networks, the full list is included below. If there are any other networks that you'd like to see supported, please reach out on Twitter or Discord.
Mainnets
- Ethereum
- BNB Chain
- opBNB
- Polygon
- Polygon zkEVM
- Arbitrum
- Arbitrum Nova
- Optimism
- Base
- Scroll
- Blast
- Linea
- zkSync Era
- Avalanche
- CORE
- Mantle
- Cronos
- Bitlayer
- PulseChain
- Gnosis Chain
- Mode
- Taiko
- ApeChain
- World Chain
- Sei
- BOB
- Rootstock
- Zircuit
- Fantom
- Merlin
- Celo
- Metis
- Fraxtal
- Manta Pacific
- Moonbeam
- Moonriver
- zkLink Nova
- Astar
- Astar zkEVM
- Flare
- Songbird
- IOTA EVM
- WEMIX
- Aurora
- Immutable zkEVM
- Rollux
- Syscoin
- ZetaChain
- EOS EVM
- Chiliz
- X Layer
- Canto
- Re.al
- Kroma
- Wanchain
- Beam
- Shibarium
- Dogechain
- Horizen EON
- Oasis Emerald
- Oasis Sapphire
- Morph
- Harmony
- Boba
- Degen Chain
- ZKFair
- Oasys
- Viction
- KCC
- Fuse
- CoinEx Smart Chain
- Neon
- Velas
- Elastos
- Shimmer
- Lisk
- Milkomeda C1
- BTT Chain
- Sanko
- Ethereum Classic
- Lightlink
- ENULS
- Shape
- Mint
- inEVM
- Crab
- Darwinia
- Zora
- KardiaChain
- Bitrock
- Nahmii
- Shiden
- Callisto
- RARI Chain
- Bitgert
- Palm
- Geist
- Pego
- Redstone
- RSS3 VSL
- Exosama
- MaxxChain
- OctaSpace
- GoldX
Testnets
- Ethereum Sepolia
- Ethereum Holesky
- BNB Chain Testnet
- Polygon Amoy
- Polygon zkEVM Cardona
- Optimism Sepolia
- Arbitrum Sepolia
- Base Sepolia
- zkSync Sepolia
- Linea Sepolia
- Scroll Sepolia
- Taiko Hekla
- Blast Sepolia
- Morph Holesky
- Avalanche Fuji
- Cronos Testnet
- Celo Alfajores
- Fantom Testnet
- Moonbase Alpha
- Mantle Sepolia
- Kroma Sepolia
- CoinEx Testnet
- Syscoin Tanenbaum
- Fraxtal Holesky
- Horizen Gobi
- Shimmer Testnet
- IOTA EVM Testnet
- ZetaChain Testnet
- Berachain bArtio
- Beam Testnet
- Tabi Testnet
- RSS3 VSL Sepolia
- Story Odyssey
When searching for accounts in the search bar, you can use several different domain name services. Currently we support ENS, Unstoppable Domains and Avvy Domains. We may add other domain name services in the future.