What is Revoke.cash?
Revoke.cash is an Approve management DApp with a simple and user-friendly interface. It allows users to view and revoke obsolete authorizations, enhancing user control and security over their assets.
Authorization is a mechanism that allows third-party contracts to use a specific amount of tokens on behalf of the user. This mechanism helps to facilitate liquidity provision and transaction functions but also has some potential risks. For example, if a user grants authorization to a malicious contract and fails to revoke it promptly, the malicious contract could misuse this authorization to transfer the user's tokens at will. This could lead to financial losses for the user and pose a security threat.
As of now, Revoke.cash supports managing authorizations in networks such as Ethereum, Arbitrum, Optimism, BSC, Polygon, and Avalanche. Click here for more information about Revoke.cash.
How to Use Revoke.cash in imToken
1. Open your imToken wallet and click the dropdown menu of your default network at the top to access the Network switch page. Choose the network you want to manage authorizations. On the corresponding function bar, slide left to the “Rovoke” feature and click it to access Revoke.cash.
Note: If the page is displayed in another language, scroll to the bottom and switch to English.
2. Click the hamburger menu "☰" at the upper right side and press "Connect Wallet." Since MetaMask is compatible with imToken, you can choose it and click "Confirm" to make your wallet address public to Revoke.cash.
Note: If you want to manage authorizations for other networks, such as BSC, Polygon, etc., you can switch networks directly on this page by clicking the network dropdown menu next to the share function.
3. After successfully connecting your wallet, scroll to the bottom of the page to see the authorization status of your account. If you want to cancel an authorization, locate the asset you want to revoke authorization for in the authorization record list, slide left, and click "Revoke." Afterward, click “Next” - “Confirm” on the pop-up page to cancel the authorization successfully.
If you want to change the number of authorized assets, you can click the pencil icon "✏️" to modify. After entering the value, click "Update" then “Confirm” on the pop-up page.
Note: Revoking or changing the number of authorized tokens involves sending a transaction. As such, ensure you have enough funds in your wallet for gas fees.
FAQ
Q1. If I have an "Unlimited" authorization, does this mean my entire portfolio is at risk?
A: "Unlimited" authorization is limited to the specific tokens or NFTs you authorize. For example, if you provided unlimited authorization for DAI, all your DAI might be at risk, but the rest of your portfolio won't be affected. Similarly, your "unlimited" authorization for Bored Ape won't affect your CryptoKitties.
Q2. Is my wallet safe if I disconnect it from a DApp, rather than revoke the authorization?
A: No. Disconnecting your wallet from a DApp does not protect it from the effects of authorization and related vulnerabilities. When the DApp and wallet are disconnected, it only means that it can no longer see your address, but the authorization for a third-party contract on that website still remains valid.
Click to know more about the FAQ of Revoke.cash.
End
For best security on large amounts of crypto, consider our hardware wallet, imKey. imKey also allows users to manage authorization.
Risk Warning: The content of this article does not constitute any form of investment advice or recommendation. imToken does not make any guarantees and promises for the third-party services and products mentioned in this article, nor assume any responsibility. Token investment has risks. You should carefully evaluate these investment risks and consult with relevant professionals to make your own decisions.