How to Revoke Token Approvals on Ethereum Safely

Revoking a token approval means submitting a transaction that resets a previously granted allowance back to zero, removing a smart contract's ability to move your tokens on your behalf. It's a routine but often-neglected maintenance step for anyone who has used /defi applications over time, since old, unused, unlimited approvals — explained in /blog/how-token-approvals-work-ethereum — remain active indefinitely unless explicitly revoked.

Why revoking matters

Every time you approve a contract to spend one of your tokens, that permission persists on-chain until you either use it up through transfers or manually reset it. Over months or years of interacting with various protocols, it's common to accumulate dozens of approvals, many for applications you no longer use or that may have since been abandoned, exploited, or had their upgrade authority compromised — a risk category discussed in /blog/what-is-proxy-contract-upgradeable. Each lingering unlimited approval is a standing exposure: if that specific contract is later compromised, an attacker can drain any token still covered by an active approval, regardless of how long ago you granted it.

Step 1: Find an approval-checking tool

Because approvals aren't easily visible from a wallet's basic balance view, dedicated tools exist specifically to scan an address's full approval history across supported networks and display which contracts currently hold permissions, for which tokens, and for how much. These tools read public on-chain data — they don't require you to connect a wallet with any special elevated permissions to simply view your existing approvals, only to submit a revocation transaction afterward.

Step 2: Review the list carefully

A typical scan will surface a list of active approvals, often including several unlimited ones granted long ago for protocols you may have only used once. Before revoking, it can help to note down which approvals correspond to protocols you actively and currently use, since those may be worth leaving in place if you trust the protocol and want to avoid paying gas for a fresh approval next time you use it.

Step 3: Revoke unnecessary or risky approvals

Revoking sets the allowance for a specific token-and-spender pair back to zero, which is itself an on-chain transaction and therefore requires paying /glossary/gas, following the same fee mechanics covered in /blog/what-is-gas-limit-vs-gas-price. This is worth keeping in mind if you have many approvals to clean up — batching the highest-risk revocations first (largest unlimited allowances, or approvals tied to protocols you no longer recognize) is often more practical than revoking everything at once.

A simple prioritization approach

Approval characteristic	Priority to revoke
Unlimited amount, unused protocol	High
Unlimited amount, protocol you actively use and trust	Lower, but worth monitoring
Small/exact amount, any protocol	Lower — limited exposure by design
Approval for a protocol later flagged as exploited	Immediate

Verifying a revocation succeeded

After submitting a revocation transaction, you can confirm it went through by checking the transaction on a block explorer, following the same process covered in /blog/how-to-read-etherscan-transactions — the allowance should now show as zero for that specific token and spender pair.

Batch revocations and gas cost tradeoffs

If a scan turns up many approvals to clean up, revoking each one individually means paying a separate gas fee for every single revocation transaction. Some approval-management tools support batching multiple revocations into a single transaction, reducing the total gas cost compared to submitting them one at a time — worth considering if you've accumulated a large number of approvals across many protocols over time. Even without batching support, it's often still worth revoking high-risk approvals individually rather than leaving them active indefinitely simply to save on a modest amount of gas, especially for approvals tied to protocols holding a meaningful share of your overall portfolio.

Building this into a regular habit

Rather than treating approval cleanup as a one-time emergency response to news of an exploit, it's worth periodically reviewing your approvals — for example, every few months, or after you stop actively using a particular protocol — as a routine part of the broader wallet hygiene practices covered in /blog/defi-wallet-security. This is especially relevant if you frequently try new or experimental protocols, since those carry a higher chance of containing unexpected /blog/common-smart-contract-vulnerabilities than long-established ones.

What revoking doesn't undo

It's worth being clear about the limits of revocation: resetting an allowance to zero prevents any future use of that specific approval, but it does nothing to reverse transfers that already happened under it before revocation. If a contract has already been exploited and has already drained approved tokens, revoking at that point only protects whatever hadn't yet been moved — it's a preventative measure, not a recovery mechanism. This is exactly why proactive, periodic revocation of unused approvals is meaningfully more protective than waiting to react only after a specific protocol has already been reported as compromised.

Bottom line

Revoking unused token approvals is a simple, low-cost way to reduce your ongoing exposure to any future compromise of a protocol you interacted with in the past. Using an approval-checking tool to review your full allowance history, prioritizing large unlimited approvals for abandoned or unfamiliar protocols, and making this a periodic habit rather than a one-time cleanup meaningfully reduces a real and often-overlooked category of DeFi risk.