Frequently Asked Questions
No. Revoke.cash is a preventative tool that helps you practice proper wallet hygiene. By regularly revoking active approvals you reduce the chances of becoming the victim of approval exploits. But unfortunately it cannot be used to recover any stolen funds. You should still make sure to revoke the approvals that were used to take your funds so that they cannot steal more in the future.
No. The way approvals work under the hood requires 1 transaction per approval. So it is technically impossible to revoke multiple approvals in a single transaction.
If you have a so-called "sweeper bot" on your account that steals any ETH as soon as it comes in, your seed phrase was compromised. This means that revoking approvals is not going to help with your wallet security. Unfortunately, there is no way for your wallet to recover from this. You should abandon this wallet and create a new one.
No. Disconnecting your wallet (e.g. MetaMask) does not do anything to protect you from approval exploits - or most other exploits. The only thing that happens when disconnecting your wallet from a website is that that website cannot see your address anymore. But your approvals stay active.
No. In general, hardware wallets are much safer than mobile or browser-based wallets because the wallet's keys are securely stored on the device, making it impossible to steal the keys without proper access to the device. But with approvals no one needs to steal your keys to take your tokens. And because of that hardware wallets offer no extra protection against approval exploits.
Revoke.cash is provided as a free service, but every revoke transaction incurs a gas fee just like other blockchain transactions. This is usually quite cheap, but when gas fees rise it can get more expensive. If your transactions are not time sensitive, it may be wise to use services like GasHawk to reduce gas fees.
In the tokens' smart contracts, the functions for approving and revoking approvals are the same function. The difference is that you set the approval to 0 (for ERC20 tokens) or "false" (for NFTs) when revoking the approval. You can verify that Revoke.cash is actually revoking the approval by clicking "Edit Permission" (for ERC20 tokens), or the "data" tab (for NFTs) in MetaMask.
Revoking approvals has no impact on your deposited or staked tokens. These tokens will stay deposited and you will still be able to withdraw them. However, if you want to add more tokens to your deposited position, you will need to grant an approval again.
Choosing which approvals to revoke is always a trade-off between safety and convenience. For certain well-known protocols (e.g. Uniswap) it is most likely fine to leave approvals active, but for newer and unknown smart contracts, it is more prudent to revoke approvals. Also keep in mind that some use cases require you to keep your approvals active. For example, if you have active listings on OpenSea you need to keep the approvals in order for the listings to remain active.
Generally you don't need to revoke token approvals on testnets, because tokens on testnets do not have any value. Every individual token approval only applies to a single token on a single network. So token approvals on testnets are not a security risk for your mainnet tokens.
The Revoke.cash browser extension supports every EVM network. The Revoke.cash website supports a large number of EVM networks, the full list is included below. If there are any other networks that you'd like to see supported, please reach out on Twitter or Discord.
Mainnets
Ethereum
BNB Chain- opBNB
Polygon- Polygon zkEVM
Arbitrum
Arbitrum Nova
Optimism
Base
Scroll
Blast
Linea
zkSync Era
Avalanche
Cronos
CORE
Mantle
PulseChain
Gnosis Chain
Mode
Taiko
ApeChain
World Chain
Sei
Rootstock
Fantom
Merlin
Celo
Metis
BOB
Fraxtal
Manta Pacific
Moonbeam
Moonriver
zkLink Nova
Astar- Astar zkEVM
Flare
Songbird
IOTA EVM
WEMIX
Aurora
Immutable zkEVM
Rollux
Syscoin
ZetaChain
EOS EVM
Chiliz
X Layer
Canto
Re.al
Kroma
Wanchain
Beam
Shibarium
Dogechain
Horizen EON
Harmony
Boba
ZKFair
Oasys
Viction
KCC
Fuse
CoinEx Smart Chain
Neon
Velas
Elastos
Zircuit
Morph
Evmos
Shimmer
Degen Chain
Milkomeda C1
BTT Chain
Sanko
Ethereum Classic
Lightlink
ENULS
Mint
inEVM
Crab
Darwinia
Zora
KardiaChain
Bitrock
Nahmii
Shiden
Callisto
RARI Chain
Bitgert
Palm
Pego
Oasis Emerald- Oasis Sapphire
Redstone
RSS3 VSL
Exosama
MaxxChain
OctaSpace
GoldX
Testnets
- Ethereum Sepolia
- Ethereum Holesky
- BNB Chain Testnet
- Polygon Amoy
- Polygon zkEVM Cardona
- Optimism Sepolia
- Arbitrum Sepolia
- Base Sepolia
- zkSync Sepolia
- Linea Sepolia
- Scroll Sepolia
- Taiko Hekla
- Blast Sepolia
- Morph Holesky
- Avalanche Fuji
- Cronos Testnet
- Celo Alfajores
- Fantom Testnet
- Moonbase Alpha
- Mantle Sepolia
- Kroma Sepolia
- CoinEx Testnet
- Syscoin Tanenbaum
- Fraxtal Holesky
- Horizen Gobi
- Shimmer Testnet
- IOTA EVM Testnet
- ZetaChain Testnet
Berachain bArtio- Beam Testnet
Tabi Testnet- RSS3 VSL Sepolia
When searching for accounts in the search bar, you can use several different domain name services. Currently we support ENS, Unstoppable Domains and Avvy Domains. We may add other domain name services in the future.