How do I revoke a malicious token approval?

Use a reputable approvals manager or your wallet's approvals view to set the allowance to zero for the suspicious contract.

Is signing a message always safe?

No. Signatures such as Permit and Permit2 can authorize asset transfers. Only sign messages you can fully decode and understand.

What if I already signed a drainer?

Immediately revoke approvals, move remaining assets to a fresh wallet, and stop using the compromised key.

Stop Web3 phishing before you sign

Independent defensive knowledge base on social engineering and wallet-draining scams.

Get live scam alerts Open the Defender app

Approval phishing

Signing an approval or Permit2 message hands attackers spending rights. Prefer exact-amount approvals; revoke unused allowances.

Address poisoning

Lookalike transfers seed a fake address into your history. Verify the full address; use an address book.

Seed-phrase scams

No legitimate service asks for your recovery phrase. Never type it into any website.

Malicious signatures

Permit, Permit2 and Seaport messages can move assets. Sign only decoded, understood requests.

Fake airdrops / drainers

Spoofed claim pages route clicks into drainer contracts. Open dApps via bookmarks; simulate transactions.

Fake support

Teams never DM first or ask for a seed phrase. Verify identities before acting.

Don’t know your risk level? Take the free 60-second Crypto Safety Score quiz — get your 0‑100 score and a personal defensive checklist. No signup required.

Scan now — it's free Open in Telegram