How to Check Token Approvals on Ethereum
Token approvals let Ethereum wallets, DeFi apps, and NFT marketplaces move assets on your behalf, which is convenient until an allowance becomes too broad.
This guide explains how to check token approvals on Ethereum, what the approval data means, and how to reduce exposure before it becomes a security problem.
What token approvals are and why they matter
On Ethereum, most fungible tokens follow the ERC-20 standard.
When you interact with a decentralized application, you often sign an approval transaction that gives a smart contract permission to spend a specific token from your wallet.
This permission is usually stored as an allowance in the token contract.
The allowance tells the token contract how much of your balance a spender address is allowed to transfer.
For example, an approval of 1,000 USDC for a DEX router means that router can move up to 1,000 USDC from your wallet without asking again.
Approvals matter because they can persist long after you stop using a service.
If a contract is compromised, or if you approved an unlimited amount, a malicious spender can drain tokens that are still allowed under that approval.
How token approvals work on Ethereum
Most ERC-20 tokens expose an allowance(owner, spender) function.
Your wallet is the owner, and the app contract is the spender.
The approval flow typically looks like this:
- You connect your wallet to a dApp.
- The app asks you to approve token spending.
- You sign an on-chain transaction that sets an allowance.
- The contract can then transfer tokens up to that limit.
Some tokens, such as certain stablecoins and older implementations, may use non-standard behaviors.
However, the core idea remains the same: the approval is a permission record on-chain, not just a browser-side session.
How to check token approvals on Ethereum using a wallet dashboard
The fastest way to check token approvals on Ethereum is through a wallet interface that exposes connected permissions.
Many users rely on tools built into wallets such as MetaMask, Rabby, or portfolio dashboards that show active allowances.
Look for a section named something like:
- Token approvals
- Permissions
- Connected sites
- Spending limits
These dashboards usually list the token, the spender contract, the approved amount, and the network.
If the interface shows “unlimited,” that means the allowance was set to a very large value, often the maximum uint256 value used by ERC-20 contracts.
When reviewing entries, focus on whether the spender is still a trusted protocol.
Old approvals for abandoned DEXs, experimental bridges, or short-lived NFT mints are common risk points.
How to check token approvals on Ethereum with block explorers
Etherscan is one of the most widely used tools for inspecting on-chain activity on Ethereum.
It can help you identify approval transactions and the spender addresses behind them.
To check approvals on a block explorer, follow this process:
- Open your wallet address on Etherscan.
- Review the ERC-20 Token Txns and token-related transactions.
- Look for approval events or transactions labeled Approve.
- Inspect the contract address that received the approval.
- Confirm whether the allowance is still relevant.
Some explorers and portfolio tools can also show historical token approvals in a dedicated permissions view.
This is useful because the approval transaction itself may be buried among swaps, transfers, and contract interactions.
What the spender address tells you
The spender is the contract that can use your tokens under the approval.
Trusted spender addresses often belong to well-known protocols such as Uniswap, Aave, Curve, OpenSea, or a bridge contract you intentionally used.
Unknown or suspicious spender addresses deserve extra attention, especially if they are linked to a URL or dApp you no longer recognize.
How to check token approvals on Ethereum with a dedicated approval scanner
Dedicated approval scanners are the most efficient option if you want a clear risk overview.
Popular tools in the Ethereum ecosystem include Revoke.cash and similar allowance management services.
These tools query token contracts and show which spenders can access your tokens.
Typical benefits of an approval scanner include:
- Showing approvals across multiple tokens in one place
- Highlighting unlimited allowances
- Grouping permissions by spender
- Making revocation straightforward
These scanners are especially useful for users with long DeFi histories.
If you have used multiple wallets, bridges, staking protocols, and NFT marketplaces, manual review becomes time-consuming quickly.
How to interpret approval risk
Not all approvals are equally dangerous.
The risk depends on the token, the spender, and the allowance amount.
A small allowance for a reputable protocol is usually lower risk than an unlimited allowance for an unfamiliar contract.
Key factors to evaluate include:
- Allowance size: Unlimited approvals increase exposure.
- Spender reputation: Established protocols are generally safer than unknown contracts.
- Token value: High-value tokens such as stablecoins and wrapped ETH deserve close monitoring.
- Contract age and activity: Dormant or rarely used contracts may pose greater uncertainty.
- Wallet usage patterns: Hot wallets used for frequent DeFi activity need regular audits.
Special attention should go to tokens that represent large balances, long-term holdings, or recurring revenue, since these are the most attractive targets if a spender is compromised.
How to revoke token approvals on Ethereum
If you find an approval you no longer need, revoke it immediately.
Revocation sets the allowance to zero or otherwise removes the spender’s ability to move your tokens.
Most approval tools let you revoke with a few clicks:
- Connect your wallet to an approval checker or revoke tool.
- Find the token and spender you want to remove.
- Choose revoke or set allowance to zero.
- Confirm the transaction in your wallet.
Revoke actions still require an on-chain transaction, so you will pay gas fees.
On Ethereum mainnet, those fees can be higher during busy periods, but the cost is often justified if the allowance is large or the spender is no longer trusted.
When should you revoke immediately?
Revoke an approval right away if:
- You no longer use the protocol.
- The dApp was experimental or unfamiliar.
- The spender is a bridge or contract you do not recognize.
- You approved an unlimited amount and want to reduce exposure.
- A protocol or associated service announced a security incident.
How to reduce future approval risk
Good approval hygiene is easier than cleanup after the fact.
When possible, approve only the amount you need for the current transaction instead of setting an unlimited allowance.
Practical habits include:
- Use hardware wallets for higher-value accounts.
- Prefer wallets that clearly display allowance requests.
- Review every approval before signing.
- Revoke permissions after one-time token use.
- Separate long-term holdings from active DeFi funds.
For frequent DeFi users, it helps to maintain separate wallets: one for active trading and another for cold storage.
This limits how many approvals are tied to your largest balances.
Common mistakes when checking approvals
A few common errors can make approval reviews less effective:
- Ignoring old approvals because they were created months ago
- Assuming a disconnected site can no longer access tokens
- Confusing wallet connection permissions with token approvals
- Overlooking approvals on multiple Ethereum-compatible networks
- Failing to inspect unlimited allowances on high-value tokens
Remember that being disconnected from a website does not automatically remove an on-chain allowance.
If the token approval remains active, the spender may still use it.
What about approvals on Layer 2 networks and sidechains?
If you use Arbitrum, Optimism, Base, Polygon, or another EVM-compatible network, approvals can exist there too.
Token permissions are network-specific, so checking Ethereum mainnet alone is not enough if you bridge assets or use multi-chain dApps.
In practice, you should review approvals on every network where your wallet holds valuable tokens.
A safe setup on mainnet does not guarantee the same on a Layer 2 or sidechain.
Best practices for ongoing token approval management
Use a periodic routine to keep permissions under control.
A monthly or quarterly review is enough for many users, while active traders may want to check more often.
- Audit approvals after major DeFi activity.
- Review permissions after using new dApps.
- Track spender addresses for protocols you trust.
- Revoke allowances for short-lived campaigns and mints.
- Keep an eye on high-value holdings such as ETH, WETH, USDC, and USDT.
By making approval checks part of your normal wallet maintenance, you reduce the chance that a forgotten allowance becomes a loss event.