How to revoke risky token approvals

Approvals live on-chain. This site cannot click Revoke for you. The unique job: verify a clean wallet binary, then use a real revoke surface — with a loss table of what each surface cannot clear.

Security Guides · 7 min · Updated Aug 2026 · Expert

To revoke token approvals, you send an on-chain transaction from the wallet that granted approve — WalletGuard cannot do that from this origin. Install a real wallet first (Rabby’s approval UI is why the verifier presets rabby_chrome), then revoke on Rabby, Etherscan token approvals, or Revoke.cash.

If the seed was typed into a fake app, revoking from the burned wallet is a race. Prefer a new seed on a verified install, then move funds, then revoke leftovers from the old address if you still control it.

Do this now

  1. Confirm you are on a real wallet binary. If you are about to revoke from Rabby, confirm ID acmacodkjbdgmoleebolmdjonilkdbch and hash a file with the embed below. A fake Rabby with a revoke screen is still a drainer.
  2. Revoke on an actual chain UI. Rabby: Approvals / security panel. Etherscan: address → Token Approvals. Revoke.cash: connect the same address. Sign the revoke. This website will not pop a wallet connect.
  3. Treat unlimited approve as the default threat. Set allowances to zero. Then stop signing new unlimited approvals on mint sites. Drainers are explained in the drainers guide — this page only covers the revoke step.

Revoke surface → what it clears → what it cannot

Field-level loss table
SurfaceClearsCannot clear
Rabby approvals UIEVM allowances the extension can seeSolana token delegations; a stolen seed
Etherscan Token ApprovalsTracked ERC-20/721 allowances on that explorer’s chainsApprovals on a chain the explorer does not list
Revoke.cashEVM allowances you connectNeed for a real extension; phishing clones of revoke sites
WalletGuardNothing on-chainWe only hash installers
Bookmark revoke.cash / Etherscan yourself. Search ads for “revoke approvals” are as toxic as wallet download ads.

What revoking cannot do

It cannot un-steal ETH already transferred. It cannot fix a seed you posted. It cannot replace hardware confirmation.

Permit / Permit2 signatures are a related class — still a signature, still not this website.

After a fake install: what to do now. Drainer mechanics: wallet drainers. Real Rabby: download Rabby.
Live artifact · preset rabby_chrome

Catalog hash loads from WalletGuard’s wallet database. Confirm the same string on the developer’s signed release before you install.

Hash this file in the browser

Nothing is uploaded. Web Crypto SHA-256 stays on this device.

·
SHA-256

Compare to the catalog hash

This page pre-selects rabby_chrome. Switch wallets if you grabbed a different build.

Preset hash: loads from catalog

No file selected yet.

Open the full verifier with this preset →

Frequently asked questions

Can WalletGuard revoke my token approvals?

No. Revoke is an on-chain transaction from your wallet. We only provide a local SHA-256 tool so the wallet you use to revoke is the real binary.

Is Revoke.cash the only way?

No. Rabby’s in-extension approvals UI and Etherscan token approvals both work for EVM allowances. Use official URLs you typed, not ads.

I already signed an unlimited approve. Is revoke enough?

Revoke stops future pulls against that spender. It does not reverse completed transfers. Do it anyway, then tighten how you sign.

Open verifier · rabby_chrome