Read-only token approval reports
Who can spend tokens from your wallet?
Every time you connect your wallet to a crypto app, you usually give it permission to spend some of your tokens. A lot of that permission is unlimited, and it does not expire when you stop using the app.
If that app gets hacked, anyone who abuses that old permission could drain your wallet. No password is needed, and there is no way to reverse it.
ApprovalWatch checks this for you. Paste your public wallet address and we translate the public approval records into plain English: who can spend what, which permissions are unlimited, and which are worth cancelling. We never connect to your wallet or ask for keys, and we link every result so you can verify it yourself.
Run a free scan
Why this matters
The spare key you forgot you gave out
When you use a crypto app, you often give it permission to spend tokens from your wallet. Many people give unlimited permission — because the app asks for it — and then forget it exists.
If that app is later hacked, or turns bad, that old permission can be used to take those tokens. No one needs your password or seed phrase to use a permission you already granted.
Most people have no idea who can still spend from their wallet today. That is the problem ApprovalWatch checks.
Like a spare house key
Think of each approval as a spare key to your house. You may have handed one out years ago and forgotten. ApprovalWatch checks who still holds a key — using only your public wallet address.
We never connect to your wallet, never ask for keys, never touch or move your crypto.
See who can spend
A plain-English list of every current approval we find: who the spender is, which token, and how much they are allowed to spend.
Catch unlimited and old permissions
We flag unlimited approvals and approvals older than 12 months — the ones most likely to have been forgotten.
Get alerted when it changes
With monitoring, you are told when a new permission appears, so a change does not sit unnoticed. See monitoring plans.
If you never check
What can happen if you never check
None of this requires anything to go wrong on your side. These are simply how approvals work — and what checking does about each one.
1. An unlimited permission meets a hacked app
If an app you gave unlimited permission to is hacked or compromised, that permission can be used to spend tokens up to the unlimited amount — without any further approval from you.
What checking does: we flag every unlimited approval so you can review it and revoke it yourself if you no longer need it.
2. Permissions do not expire on their own
An approval stays active just because you stopped using an app, changed a password, or let time pass. Cancelling it — revoking — is a separate action only you can take.
What checking does: we show the age of each approval and link you to where you can revoke it.
3. You may not notice until tokens move
There is no bank-style fraud department or chargeback in crypto. Transactions are usually irreversible, so finding out late can mean there is nothing to undo.
What checking does: monitoring alerts you when permissions change, so you can look while there is still a decision to make.
4. Old approvals quietly add up
Months and years of trying apps can leave many live permissions behind. Each one is small on its own; together, your exposure grows silently.
What checking does: we list current approvals in one plain-English report and highlight those older than 12 months.
5. A permission you never meant to give
A phishing site or a mistaken click can leave a new approval you did not intend. Without looking, it can sit unnoticed.
What checking does: we flag new and unrecognised spenders, with explorer links so you can verify who they are.
You control the permission list
You cannot control whether an app gets hacked. You can control who still has permission to spend from your wallet.
Checking reduces surprises. No service — including this one — can guarantee safety.
How it works
Three steps, no wallet connection
Paste a public address
Only the address you can already see on any block explorer. Nothing that could move funds.
Read the plain-English report
“This spender can spend unlimited USDC from this wallet” — with the token, spender, allowance and age for each approval.
Verify, then act yourself
Check the finding on the explorer. If you decide to revoke, we link you to Revoke.cash and you execute it in your own wallet. We never can.
Sample report
What a finding looks like
Uniswap V3 SwapRouter can spend unlimited USDC from this wallet
Unlimited — high attentionToken: USDC (USD Coin) · Age: over 12 months · Spender: 0xe592427a0aece92de3edee1f18e0157c05861564
OpenSea Seaport can spend unlimited WETH from this wallet
Unlimited — high attentionToken: WETH (Wrapped Ether) · Age: over 12 months · Spender: 0xdef1c0ded9bec7f1a1670819833240f027b25eff
Uniswap V2 Router can spend 500 USDT from this wallet
Finite allowance — infoToken: USDT (Tether USD) · Age: recent · Spender: 0x7a250d5630b4cf539739df2c5dacb4c659f2488d
What we flag
The approvals worth a second look
Unlimited approvals
Allowances so large they are effectively unlimited. The spender could move the full token balance, up to that allowance, without asking again.
New approvals
Recently granted approvals you may not remember approving — worth confirming you recognise the spender and the app you used.
Old approvals
Approvals older than 12 months, including ones for apps you may no longer use. Forgotten approvals stay active until revoked.
Unrecognised spenders
Spenders we cannot match to a known service. That does not make them harmful — it means you should verify them on the explorer before deciding anything.
Pricing
Start free. Pay only for monitoring.
Free — 1 wallet, manual scan · Starter $7/mo — 5 wallets · Plus $15/mo — 15 wallets. Annual Starter option $59/yr.
FAQ
Common questions
Is this financial advice?
No. We report public approval facts and give no trading or financial advice.
Does a clean report mean my wallet is safe?
No. Monitoring is not a guarantee. Approvals are one type of public record; a scan covers the records and range it reports. Always verify on the explorer.
Do you connect to my wallet or need my keys?
Never. Public address only. Anyone asking for a seed phrase or private key is not us — never enter one anywhere that asks.
Can you revoke an approval for me?
No — by design. We link to Revoke.cash and the explorer, and you execute any revoke yourself in your own wallet. See Help & how to revoke.
Which chains are supported?
Ethereum, BNB Chain, Base, Arbitrum, and Polygon. Pick the chain in the scan form before you run a scan. Each report shows the chain that was scanned and links to the right block explorer for that chain.
What does monitoring add over a one-off scan?
Paid plans re-scan your wallets on a schedule and alert you about new, unlimited, or old approvals, so you do not have to remember to check.
Monitoring alerts
Get told about new approvals
Join the list for monitoring alerts when a watched wallet gains a new, unlimited, or old approval. Monitoring is a prompt to review — it is not a guarantee.