CapyGuard

Oct 2026 · CapyGuard team

Spring-clean your wallet: why old approvals are a ticking risk

Every time you swap on a DEX, you first "approve" the contract to spend your token. What most people don't realise: that permission doesn't end when your swap does. It sits there, often unlimited, for every dapp you've ever touched — including the ones you've forgotten about.

What an approval really is

An approval is a standing instruction on the blockchain: "this contract may take up to X of my tokens whenever it wants." Most dapps ask for unlimited X, so you only pay the approval gas once. Convenient — and it means that if the contract is ever exploited, upgraded maliciously, or was a scam from the start, it can take everything you approved, at any time, without asking you again.

This is how many "hacks" actually happen. Not a stolen password, not a leaked seed phrase — just an old, forgotten approval on a contract that got compromised months after you last used it.

Audit yourself in ten minutes

Habits that keep the list short

Prefer dapps that ask for exact-amount approvals instead of unlimited ones. Treat every new approval as a small act of trust, because it is. And make a recurring date — first Sunday of the month, with coffee — to review and revoke. Ten minutes of housekeeping beats one bad morning of watching a drainer walk off with a year of yield.

Where CapyGuard helps

Prevention beats cleanup: CapyGuard pauses unlimited approvals and setApprovalForAll requests as they happen and tells you, in plain language, what you're about to grant and to whom. Fewer careless approvals today means a much shorter revocation list next month.

← Back to the blog