Revoke-cash.life logo

Frequently Asked Questions

Can I use Revoke-cash.life to recover stolen assets?

No. Revoke-cash.life is a preventative tool that helps you practice proper wallet hygiene. By regularly revoking active approvals you reduce the chances of becoming the victim of approval exploits. But unfortunately it cannot be used to recover any stolen funds. You should still make sure to revoke the approvals that were used to take your funds so that they cannot steal more in the future.

I want to revoke approvals, but when I add ETH to my account it gets stolen.

If you have a so-called "sweeper bot" on your account that steals any ETH as soon as it comes in, your seed phrase was compromised. This means that revoking approvals is not going to help with your wallet security. Unfortunately, there is no way for your wallet to recover from this. You should abandon this wallet and create a new one.

Is it enough to "disconnect" my wallet instead of revoking approvals?

No. Disconnecting your wallet (e.g. MetaMask) does not do anything to protect you from approval exploits - or most other exploits. The only thing that happens when disconnecting your wallet from a website is that that website cannot see your address anymore. But your approvals stay active.

How much does it cost to use Revoke-cash.life?

Revoke-cash.life is provided as a free service, but every revoke transaction incurs a gas fee just like other blockchain transactions. When using the batch revoke feature, a small fee of $1.50 is charged to support the continued development of Revoke-cash.life. On certain networks, the fee is covered by a sponsor.

Can hardware wallets save me from approval exploits?

No. In general, hardware wallets are much safer than mobile or browser-based wallets because the wallet's keys are securely stored on the device, making it impossible to steal the keys without proper access to the device. But with approvals no one needs to steal your keys to take your tokens. And because of that hardware wallets offer no extra protection against approval exploits.

Why does my wallet pop-up mention "give permission", "approve" or "set approval for all" when revoking?

In the tokens' smart contracts, the functions for approving and revoking approvals are the same function. The difference is that you set the approval to 0 (for ERC20 tokens) or "false" (for NFTs) when revoking the approval. You can verify that Revoke-cash.life is actually revoking the approval by clicking "Edit Permission" (for ERC20 tokens), or the "data" tab (for NFTs) in MetaMask.

What happens to my deposited or staked tokens when I revoke approvals?

Revoking approvals has no impact on your deposited or staked tokens. These tokens will stay deposited and you will still be able to withdraw them. However, if you want to add more tokens to your deposited position, you will need to grant an approval again.

Which approvals do I need to revoke?

Choosing which approvals to revoke is always a trade-off between safety and convenience. For certain well-known protocols (e.g. Uniswap) it is most likely fine to leave approvals active, but for newer and unknown smart contracts, it is more prudent to revoke approvals. Also keep in mind that some use cases require you to keep your approvals active. For example, if you have active listings on OpenSea you need to keep the approvals in order for the listings to remain active.

Do I need to revoke approvals on testnets?

Generally you don't need to revoke token approvals on testnets, because tokens on testnets do not have any value. Every individual token approval only applies to a single token on a single network. So token approvals on testnets are not a security risk for your mainnet tokens.

Which kinds of domains does Revoke-cash.life support?

When searching for accounts in the search bar, you can use several different domain name services. Currently we support ENS, Unstoppable Domains and Avvy Domains. We may add other domain name services in the future.

My question is not listed here.

If you have any questions that aren't mentioned in this FAQ, please reach out on Twitter or Discord.