【Connecting a Wallet Does Not Mean Authorizing Transfers】
On networks such as Ethereum that support token approvals, connecting a wallet usually only lets a website read your address. A token approval, however, allows a specified contract to transfer a certain token up to an approved limit. Unlimited approvals are convenient, but they also increase the risk posed by malicious contracts or contract vulnerabilities.
Don’t just look at the “Confirm” button in the pop-up: check the network, contract address, token, and allowance. If a small allowance will do, don’t grant an unlimited one. When you’re done, check for and revoke approvals you no longer need. Revoking an approval usually also requires a network fee.
Note: Disconnecting from a website does not automatically revoke on-chain approvals, and revoking an approval cannot recover assets that have already been transferred. Understanding what you’re signing is more important than acting quickly.
#区块链知识 #Wallet Security
On networks such as Ethereum that support token approvals, connecting a wallet usually only lets a website read your address. A token approval, however, allows a specified contract to transfer a certain token up to an approved limit. Unlimited approvals are convenient, but they also increase the risk posed by malicious contracts or contract vulnerabilities.
Don’t just look at the “Confirm” button in the pop-up: check the network, contract address, token, and allowance. If a small allowance will do, don’t grant an unlimited one. When you’re done, check for and revoke approvals you no longer need. Revoking an approval usually also requires a network fee.
Note: Disconnecting from a website does not automatically revoke on-chain approvals, and revoking an approval cannot recover assets that have already been transferred. Understanding what you’re signing is more important than acting quickly.
#区块链知识 #Wallet Security