Revoke.cash
Shows which contracts can spend your tokens and lets you revoke old approvals after farming, across many networks.
Security record: 1 incident · 1 refund pending- Approval dashboard for tokens and NFTs on Ethereum and 80+ other networks
- Exploit Checker matches your approvals against known exploits
- Batch revoke, in one transaction on wallets with EIP-7702
- Delegations and approval History tabs, plus a browser extension that warns before risky approvals
- Free single-chain dashboard; Premium 99 USD a year adds multichain views, Ultimate 199 USD a year adds automated revoking
Six criteria, each 1 to 5 from the facts on this page, weighted into one score inside its category. How we score
- Depth
- Approvals on Ethereum and 80+ other networks
- Cost
- Free single-chain dashboard; Premium 99 USD a year adds multichain
- Ease
- No sign-up, just an address; extension warns before risky approvals
- Trust
- Never takes custody; running since October 2019
- Access
- Open: enter any address, no account
- Rewards
- No rewards; helps you avoid losses from old approvals
Cost to start: Free single-chain dashboard (batch revoke 1.50 USD per batch); Premium 99 USD a year, Ultimate 199 USD a year
- Connect your wallet or enter an address in the search bar
- Pick a network and sort or filter your approvals
- Run the Exploit Checker
- Revoke approvals you no longer use, or lower the amount with the pencil icon
Revoking prevents future losses but cannot recover stolen funds, and each revoke is an onchain transaction that costs gas.
1 incident · 1 refund pending
Past incidents 1
Ledger Connect Kit supply-chain attack hit the site. A malicious version of Ledger Connect Kit, pulled in through Wagmi, injected a drainer into Revoke.cash and other dapps between about 11:00 and 13:00 UTC. Revoke.cash locked the site, removed the dependency and redeployed after about an hour. Revoke.cash said it could not compensate directly and pointed to Ledger, which pledged to reimburse all victims by Feb 2024; final payout not confirmed. https://revoke.cash/blog/2023/ledger-connect-kit-hack-retrospective
Third partyRefund promised
Sources: revoke.cash, cointelegraph.com, theregister.com
From the project’s statements and security coverage. Own fault means the project’s code, servers or keys; third party means a vendor, registrar, oracle or issuer it relies on.
