Token Allowance Risk Checker
List the token approvals a wallet has granted and see the value each one exposes, which are unlimited, which are stale, and which should be revoked first.
Last reviewed by the Radiatus Cloud team
Need this done properly for your business?
Radiatus delivers secure cloud, DevOps & compliance engineering.
An approval outlives the transaction that created it
Approving a contract to move your tokens is a permanent grant until you revoke it. The swap you did eighteen months ago left behind a standing permission, and if that contract is compromised next year it can take everything the allowance covers, with no action from you and no further transaction on your part. A wallet that has used a dozen protocols typically carries dozens of live approvals, most of them to contracts the owner has forgotten and some to contracts that no longer have maintainers.
Unlimited approvals are the default because they are convenient
Most interfaces request the maximum uint256 so that a user approves once rather than before every trade. That is a real usability gain and it converts a bounded exposure into an unbounded one: the allowance covers not only the balance you had then but any balance you ever hold in future. A wallet that receives a large transfer becomes exposed to every unlimited approval it has ever granted, retroactively, without doing anything.
Revoking costs gas and the calculation is straightforward
Setting an allowance to zero is a transaction with a fee. The question is whether the fee is smaller than the exposure multiplied by the probability that a given contract is compromised, and for an unlimited approval to an unaudited contract on a wallet holding real value the answer is obviously yes. Revoking the largest exposures is cheap relative to what they cover, and the approvals worth keeping are the few to contracts you actually still use.
Related tools
- Ethereum Unit Converter — Convert between Wei, Gwei, and Ether units.
- Gas Fee Calculator — Calculate transaction costs based on gas price and limit.
- IPFS CID Generator — Generate IPFS Content Identifiers (CID) from text or files.
- Wallet Address Validator — Validate Ethereum and Bitcoin wallet addresses.
Frequently Asked Questions
Does an approval expire?
No. It is a standing permission until you set it to zero, and it survives every transaction and every year in between.
Why do interfaces ask for unlimited?
To avoid an approval transaction before every trade. It is a genuine usability gain and it converts a bounded exposure into one covering any balance you ever hold in future.
If my balance is zero, am I safe?
Only until it is not. An unlimited approval covers future balances, so receiving a large transfer exposes it retroactively to every unlimited approval the wallet has ever granted.
What is Permit2 or an approval with an expiry?
A pattern where the approval carries a deadline, so a forgotten grant lapses rather than persisting. It removes the stale-approval problem for the contracts that use it.
Should I revoke everything?
Revoke the largest exposures and anything you no longer use. Keeping a bounded approval to a contract you use weekly is a reasonable trade; keeping an unlimited one to something you used once is not.
Privacy & Security
Everything runs in your browser; nothing is uploaded.
How to Use
List your approvals to see which expose the most value.
Disclaimer: This tool is provided "as is" without warranty of any kind. Results are for educational and utility purposes.