If you have connected your crypto wallet to decentralized exchanges, DeFi apps, NFT marketplaces, or other Web3 applications, you may have given smart contracts permission to spend or move certain tokens from your wallet.
These permissions are called token approvals, token allowances, or spending caps.
To revoke a crypto token approval, you need to cancel that permission on the blockchain. You can usually do this through a blockchain explorer’s token approval checker, a dedicated approval-management service, or supported wallet software. Because revoking an approval is an on-chain transaction, you generally need to pay a network gas fee.
What Is a Crypto Token Approval?
A crypto token approval is permission that allows a smart contract or decentralized application (dapp) to access and move a specific token from your wallet.
For example, suppose you have 1,000 USDT in your wallet and connect to a decentralized exchange.
The exchange may ask you to approve its smart contract to spend your USDT.
You might approve:
1,000 USDT
or, in some cases, an extremely large amount that effectively acts as an unlimited approval.
Once the approval is recorded on the blockchain, the approved contract can use the allowance according to the permission you granted.
For ERC-20 tokens, this commonly involves the approve and transferFrom functions.
Why Should You Revoke Crypto Token Approvals?
Old or unnecessary token approvals can create security risks.
If you give a malicious smart contract permission to spend your tokens, the contract may be able to move those tokens without requiring you to approve every individual transfer.
This is especially important when an approval gives a dapp a very large or unlimited allowance.
MetaMask warns that malicious token approvals can be used to drain tokens from a wallet, particularly when excessive permissions have been granted.
For example:
You approve a questionable dapp to spend unlimited USDC.
You later stop using the dapp.
Your wallet still has an active USDC allowance.
If the approved contract is malicious or compromised, the outstanding approval can create a potential avenue for those tokens to be moved.
Revoking the approval removes that allowance.
How to Revoke Crypto Token Approvals
There are several ways to revoke token approvals.
The general process is:
- Connect or search for your wallet address.
- Select the correct blockchain network.
- Find your active token approvals.
- Identify the dapp or smart contract you no longer want to authorize.
- Click Revoke.
- Confirm the blockchain transaction.
- Pay the required gas fee.
- Verify that the allowance has been removed.
The exact interface depends on the network and tool you use.
How to Revoke Token Approvals With MetaMask
MetaMask currently provides token-approval management through MetaMask Portfolio on supported networks.
MetaMask says its Portfolio spending-cap feature supports Ethereum Mainnet, Polygon, BNB Chain, Optimism, and Base.
The general process is:
Step 1: Open MetaMask Portfolio
Open MetaMask Portfolio and connect the wallet containing the approvals.
Step 2: Open Spending Caps
Go to the Spending Caps section.
This displays the token permissions associated with your wallet on supported networks.
Step 3: Find the Approval
Look for the token and dapp or smart contract you want to remove.
For example:
USDC → DEX contract → Large allowance
Step 4: Select Revoke
Choose the option to revoke the spending cap.
Step 5: Confirm the Transaction
MetaMask will ask you to confirm the blockchain transaction.
Step 6: Pay the Gas Fee
Because revoking the approval requires an on-chain transaction, you need enough of the network’s native asset to pay the gas fee.
Once the transaction is confirmed, the allowance should be removed.
How to Revoke Token Approvals Using a Blockchain Explorer
Many blockchain explorers provide token approval tools.
For example, Ethereum, BNB Chain, and Polygon explorers have approval-checking functionality. MetaMask specifically lists Etherscan, BscScan, and PolygonScan as examples.
The general process is:
- Open the blockchain explorer for the network.
- Find the token approval checker.
- Enter your wallet address.
- Review your active approvals.
- Find the contract you want to revoke.
- Select Revoke.
- Connect your wallet if required.
- Confirm the transaction.
- Pay the network fee.
- Wait for blockchain confirmation.
Make sure you are using the official website of the blockchain explorer and the correct network.
How to Revoke Token Approvals on Ethereum
For Ethereum-based tokens, you can use an Ethereum block explorer’s token approval tools or another established approval-management service.
The basic process is:
Wallet → Ethereum approval checker → Find allowance → Revoke → Confirm → Pay ETH gas
Because the transaction takes place on Ethereum, you need ETH to pay the network fee.
How to Revoke Token Approvals on BNB Chain
For BNB Chain tokens, use a compatible approval-management tool or BNB Chain block explorer.
The basic process is:
Wallet → BNB Chain approval checker → Find allowance → Revoke → Confirm → Pay BNB gas
Make sure your wallet is connected to the correct network before signing the transaction.
How to Revoke Token Approvals on Polygon
The process is similar on Polygon:
Wallet → Polygon approval checker → Find token allowance → Revoke → Confirm → Pay network fee
Always verify that you are managing approvals on the same network where the approval was originally created.
How to Revoke Token Approvals on Other Networks
Token approvals are network-specific.
If you interacted with a dapp on Ethereum, revoking an approval on another blockchain does not automatically revoke the Ethereum approval.
For example, you could have:
- USDT approval on Ethereum
- USDT approval on BNB Chain
- USDC approval on Arbitrum
- USDC approval on Base
Each permission exists on its respective blockchain.
You therefore need to check the networks you actually use.
What Does “Unlimited Token Approval” Mean?
An unlimited token approval gives a smart contract permission to spend a very large amount of a particular token.
In practical terms, this can function like permission to spend essentially all of that token in your wallet, depending on the approval mechanism and token contract.
For example, you might have:
Wallet balance: 500 USDC
Approval: Unlimited USDC
The contract does not necessarily receive 500 USDC immediately.
Instead, it receives permission to transfer USDC from your wallet within the allowance.
MetaMask notes that dapps frequently request allowances that are effectively unlimited, partly because repeated approvals cost additional transactions and gas.
Does Revoking an Approval Cost Gas?
Yes, normally.
A standard token approval is recorded on-chain, so changing or removing that permission requires another blockchain transaction.
That transaction requires a network fee.
MetaMask explicitly states that revoking token allowances requires an on-chain transaction and therefore requires gas.
For example:
Ethereum approval → revoke → pay ETH gas
BNB Chain approval → revoke → pay BNB gas
Polygon approval → revoke → pay Polygon network fee
The exact cost varies with the network and current network conditions.
Does Revoking a Token Approval Return the Gas Fee?
Generally, no.
The gas paid to process the revocation transaction is a network transaction cost.
Revoking the approval does not normally refund the gas you previously paid when you created the original approval.
You are paying for the new transaction that changes the permission.
Does Revoking an Approval Remove My Tokens?
No.
Revoking an approval does not delete or burn your tokens.
It removes the permission that a smart contract previously had to move the relevant token from your wallet.
For example:
Before revocation:
You → 1,000 USDC
Dapp → permission to spend USDC
After revocation:
You → 1,000 USDC
Dapp → no remaining allowance
Your token balance remains in your wallet.
Does Disconnecting a Wallet Revoke Token Approvals?
No.
This is one of the most important distinctions in Web3.
Disconnecting your wallet from a dapp and revoking a token approval are different actions.
Disconnecting a Wallet
Disconnecting generally removes the wallet connection between your wallet interface and the dapp.
Revoking a Token Approval
Revoking an approval removes the smart contract’s permission to access and move the approved token.
MetaMask specifically warns that disconnecting a dapp does not accomplish the same thing as revoking token allowances.
So if you disconnect from a dapp but still have an active token allowance, the approval may remain on-chain.
Does Hiding a Token Revoke Its Approval?
No.
Hiding a token in your wallet interface only changes what you see in the wallet.
It does not change the blockchain permission.
MetaMask states that hiding a token does not affect token allowances.
So:
Hide token ≠ revoke approval
Disconnect dapp ≠ revoke approval
Revoke approval = remove the token allowance
How to Check If You Have Dangerous Token Approvals
You can periodically check the wallets you use with approval-management tools.
Look for:
- Unlimited allowances
- Approvals for dapps you no longer use
- Unknown smart contracts
- Approvals you do not remember creating
- Suspicious contracts
- Large allowances for valuable tokens
MetaMask recommends regularly reviewing token approvals and revoking unnecessary permissions.
What If You Approved a Malicious Crypto Dapp?
If you suspect you approved a malicious dapp, act quickly.
First, determine whether the malicious approval is still active.
If the approval is still active, revoke it as soon as possible.
However, revoking an approval does not recover tokens that have already been stolen.
If a malicious contract has already transferred your assets, revoking the approval afterward generally cannot reverse the completed blockchain transaction.
MetaMask recommends promptly revoking suspicious approvals when possible and notes that there may be little that can be done once assets have already been drained.
What If My Wallet Has Already Been Drained?
Revoking approvals is not enough if an attacker already has control of your wallet or has already transferred your assets.
If your wallet has been compromised, consider moving remaining assets to a new secure wallet rather than continuing to use the compromised address.
Do not move assets blindly if you suspect a sophisticated exploit or automated drainer is still active.
Most importantly, never give your seed phrase or private key to anyone claiming they can recover your funds.
Can Revoking Approvals Prevent Crypto Hacks?
Revoking an unnecessary token approval can reduce one specific type of risk, but it does not make your wallet completely secure.
For example, revoking a USDC allowance does not protect against:
- A compromised private key
- A malicious seed phrase leak
- Phishing signatures
- Other token approvals
- NFT permissions
- A malicious transaction you later sign
- Other wallet or smart-contract vulnerabilities
Think of approval management as one part of overall wallet security.
What Is the Difference Between Token Approval and Wallet Connection?
These concepts are often confused.
| Action | What It Does |
|---|---|
| Connect wallet | Lets a dapp interact with your wallet interface and address |
| Token approval | Gives a smart contract permission to move a specific token |
| Unlimited approval | Gives very large spending permission for a token |
| Revoke approval | Removes the token spending permission |
| Disconnect wallet | Removes the active wallet-dapp connection |
| Hide token | Removes the token from the wallet interface |
| Transfer funds | Actually moves crypto from one address to another |
The key distinction is:
Connecting your wallet does not automatically mean a dapp can spend every token in your wallet.
Token spending permissions are a separate concept.
How Often Should You Revoke Crypto Token Approvals?
There is no universal schedule that everyone must follow.
A practical approach is to review your approvals periodically and remove permissions you no longer need.
MetaMask suggests developing a habit of checking token approvals regularly, such as monthly.
You may want to check more frequently if you:
- Use many DeFi protocols
- Frequently interact with new dapps
- Participate in airdrops
- Trade NFTs
- Use multiple wallets
- Test unfamiliar Web3 applications
Should You Revoke Every Token Approval?
Not necessarily.
Token approvals are a normal part of using many Web3 applications.
For example, a decentralized exchange may need permission to access a token so it can execute a swap.
If you revoke that approval immediately, you may need to approve the token again the next time you use the dapp.
The decision depends on your usage and risk tolerance.
The important thing is to understand what you approved, how much you approved, and which contract received the permission.
Is It Better to Use a Limited Token Approval?
Generally, a limited approval gives a dapp less spending authority than an unlimited allowance.
For example:
Limited approval: 100 USDC
versus:
Unlimited approval: effectively unlimited USDC
If a malicious contract later attempts to use the permission, a smaller allowance can reduce the amount exposed through that particular approval.
MetaMask allows users to customize token spending caps rather than automatically accepting the amount suggested by a dapp.
Can You Revoke NFT Approvals?
Yes, but NFT permissions can work differently from standard ERC-20 token allowances.
For ERC-721 and ERC-1155 NFTs, a common permission mechanism is setApprovalForAll.
This can give a marketplace or smart contract permission to manage NFTs associated with a particular collection contract.
MetaMask explains that setApprovalForAll can allow another address to manage all NFTs associated with a particular ERC-721 or ERC-1155 contract.
Therefore, NFT users should also review marketplace approvals and other permissions.
What Is Permit2 and Does Revoking Token Approvals Cover It?
Not necessarily.
Some Web3 applications use Permit2, an approval system associated with Uniswap that can consolidate token permissions and improve the user experience.
Permit2 signatures can have their own validity periods and permission structure.
MetaMask warns that a Permit2 signature can remain valid for a specified period and recommends using appropriate tools to manage such permissions if you suspect a malicious signature.
This means checking standard ERC-20 allowances alone may not cover every type of permission you have granted.
How to Stay Safe From Dangerous Token Approvals
Follow these basic practices:
1. Check What You Are Approving
Don’t automatically click Approve.
Read the token and spending amount.
2. Avoid Unlimited Approvals When You Don’t Need Them
Use a smaller spending cap when practical.
3. Verify the Dapp
Make sure you are interacting with the real website and not a phishing copy.
4. Review Your Existing Approvals
Periodically inspect the permissions associated with your wallets.
5. Revoke Unused Approvals
If you no longer use a protocol, consider removing its token allowances.
6. Protect Your Seed Phrase
A legitimate dapp should never need your seed phrase.
7. Don’t Sign Unexpected Transactions
If you don’t understand a wallet request, stop and investigate before signing.
Frequently Asked Questions
What is a token approval in crypto?
A token approval is permission granted to a smart contract or dapp to access and move a specific token from your wallet.
How do I revoke a crypto token approval?
Use your wallet’s supported approval-management feature, a blockchain explorer’s token approval checker, or a reputable approval-management service. Select the approval you want to remove and confirm the revocation transaction.
Does revoking a token approval cost money?
Yes. Revoking an on-chain token approval normally requires a blockchain transaction, so you need to pay the applicable network gas fee.
Does revoking an approval delete my crypto?
No. Revoking an approval removes a smart contract’s permission to move the approved token. It does not delete your token balance.
Does disconnecting my wallet revoke token approvals?
No. Disconnecting a dapp and revoking a token allowance are separate actions.
Does hiding a token revoke its approval?
No. Hiding a token only changes its display in your wallet and does not remove its blockchain allowance.
What happens if I revoke a USDT approval?
The smart contract will no longer have the revoked allowance to spend your USDT through that approval. You can still hold and transfer your USDT normally.
What happens if I revoke a USDC approval?
The specific smart contract’s allowance to access your USDC is removed or reduced according to the revocation transaction.
Can I revoke an unlimited token approval?
Yes, where the token and network support standard approval management. You submit a transaction that changes the allowance, typically to zero.
Can I revoke approvals on Ethereum?
Yes. Ethereum token approvals can be reviewed and revoked through supported approval-management tools.
Can I revoke approvals on BNB Chain?
Yes. BNB Chain supports token allowance management through compatible blockchain explorers and other tools.
Can I revoke approvals on Polygon?
Yes. Polygon token approvals can be reviewed and revoked using compatible approval-management tools.
Can revoking an approval recover stolen crypto?
Usually no. Revoking an approval can prevent future use of that allowance, but it does not reverse transactions that have already been confirmed.
Should I revoke old DeFi approvals?
If you no longer use the dapp, reviewing and potentially revoking its token approvals can reduce unnecessary exposure.
Can a malicious smart contract drain my crypto after I revoke its approval?
A successfully revoked standard token allowance should no longer permit that contract to spend the token through that allowance. However, other permissions or vulnerabilities may still exist, so investigate the wallet carefully if you believe it was compromised.
How do I know which token approvals are active?
Use your wallet’s permission-management features or a compatible blockchain approval checker to view allowances associated with your address.
How to Revoke Crypto Token Approvals Explained Simply
A token approval is like giving a Web3 application a permission slip.
For example:
You → give DEX permission to spend USDC
The DEX can then use that permission when you perform an approved action.
If you stop using the DEX, you can revoke the permission:
You → revoke USDC approval → DEX no longer has that allowance
The important thing is that disconnecting your wallet is not the same as revoking a token approval.
If you use DeFi, NFT marketplaces, or other Web3 applications regularly, periodically checking your approvals can help reduce unnecessary smart-contract permissions.
Key Takeaways
- Token approvals give smart contracts permission to move specific tokens from your wallet.
- An approval can remain active after you stop using a dapp.
- Revoking an approval removes that token spending permission.
- Revoking an approval requires an on-chain transaction and normally costs gas.
- Disconnecting a wallet from a dapp does not necessarily revoke token approvals.
- Hiding a token in your wallet does not revoke its allowance.
- Unlimited approvals can create additional risk if the approved contract is malicious or compromised.
- Limited spending caps can reduce the amount exposed through an individual approval.
- NFT permissions and systems such as Permit2 may require separate consideration.
- If crypto has already been stolen, revoking an approval generally cannot reverse the completed transaction.
Regularly reviewing and removing unnecessary token approvals is a useful part of basic Web3 wallet security.
