{"id":3638,"date":"2021-11-17T03:22:44","date_gmt":"2021-11-17T03:22:44","guid":{"rendered":"https:\/\/blog.mathwallet.org\/?p=3638"},"modified":"2022-07-18T02:27:27","modified_gmt":"2022-07-18T02:27:27","slug":"caution-malicious-approve","status":"publish","type":"post","link":"https:\/\/blog.mathwallet.org\/?p=3638","title":{"rendered":"Caution Malicious Approve"},"content":{"rendered":"

What is an Approve?<\/h2>\n

Approve is to allow another account (It can be an ordinary personal account or a contract account), which can control your asset without your permission. Approve is a very dangerous action.<\/p>\n

Why Approve?<\/h2>\n

Approve widely exists in ETH, TRON and all EVM compatible public chain<\/p>\n

Approve is like pre-authorized debit in Paypal, it allows dapp finish a set of operations automatically and save cost. Ex, it is heavily used in Uniswap\/Opensea, etc.<\/p>\n

Approve is a 0 amount transaction, and you need to pay attention to all transaction confirmation window<\/p>\n

\"\"<\/p>\n

Approve Scams<\/h2>\n

Malicious dapp will leverage different ways to get your approve and transfer all your assets<\/p>\n

How to prevent<\/h2>\n

1 Don’t play DApps from unknown sources,<\/p>\n

2 Regularly use<\/p>\n

Etherscan https:\/\/etherscan.io\/tokenapprovalchecker<\/a><\/p>\n

Revoke https:\/\/revoke.cash\/<\/a><\/p>\n

DeBank https:\/\/debank.com\/<\/a><\/p>\n

Cointool https:\/\/cointool.app<\/a><\/p>\n

Tronscan(TRON) https:\/\/tronscan.org<\/a><\/p>\n

to cancel the approval<\/p>\n\n\n

Let\u2019s use Etherscan (https:\/\/etherscan.io\/tokenapprovalchecker<\/a>) to revoke an NFT approval as an example:<\/p>\n\n\n\n

1 Click \u2018Connect to Web3\u2019 and connect your MathWallet<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

2 Switch to ERC-721 tab<\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

3 If you do not know the source of the Approved Spender (such as Opensea, Looksrare), please click the \u2018Revoke\u2019 button and submit the revoke transaction.<\/p>\n","protected":false},"excerpt":{"rendered":"

What is an Approve? Approve is to allow another account (It can be an ordinary personal account or a contract account), which can control your asset without your permission. Approve is a very dangerous action. Why Approve? Approve widely exists in ETH, TRON and all EVM compatible public chain Approve is like pre-authorized debit in […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"unlock_protocol_post_locks":""},"categories":[1],"tags":[55,9],"_links":{"self":[{"href":"https:\/\/blog.mathwallet.org\/index.php?rest_route=\/wp\/v2\/posts\/3638"}],"collection":[{"href":"https:\/\/blog.mathwallet.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mathwallet.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mathwallet.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mathwallet.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3638"}],"version-history":[{"count":6,"href":"https:\/\/blog.mathwallet.org\/index.php?rest_route=\/wp\/v2\/posts\/3638\/revisions"}],"predecessor-version":[{"id":4012,"href":"https:\/\/blog.mathwallet.org\/index.php?rest_route=\/wp\/v2\/posts\/3638\/revisions\/4012"}],"wp:attachment":[{"href":"https:\/\/blog.mathwallet.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mathwallet.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mathwallet.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}