How to Revoke Smart Contract Approvals (NFT Wallet Guide)
If you’ve ever connected your wallet to a mint page, marketplace or NFT project, you’ve probably granted a smart contract approval — permission for that contract to move specific assets from your wallet. Approvals don’t expire on their own, and forgotten ones are the standard mechanism behind wallet drains.
Last reviewed: September 2026
This guide shows how to revoke smart contract approvals using tools that actually exist today, which approvals are risky, and exactly what revocation changes.
Quick checklist: revoke immediately if…#
- You approved an unlimited allowance for a token
- You granted a collection-wide NFT approval (“setApprovalForAll”) on a site you don’t fully trust
- You minted from an unknown project or clicked a suspicious link
- You no longer use the dApp or marketplace you approved
- You see unusual activity or unexpected transfers
If you think you already signed something dangerous, go straight to what to do if your NFT wallet is compromised.
The two approval types worth knowing#
Not all approvals carry the same risk:
- ERC-20 token allowances — let a contract move one token type up to a set amount. “Unlimited” means your whole balance of that token. Common from swaps and DeFi.
- NFT operator approvals (
setApprovalForAll) — let a contract move every NFT in that collection at once. Marketplaces legitimately need this to list your items; it is also the approval drainers target most, because one bad signature can take an entire collection.
Approvals are scoped to what you granted: a token or collection approval cannot touch your ETH/native balance or unrelated assets — but inside its scope it acts without asking again.
How to revoke approvals (step-by-step)#
Step 1: Open an approval checker#
Two verified options (September 2026):
- revoke.cash — free dashboard covering 100+ EVM networks; lists every approval by chain with risk flags, and revoking a single approval costs only the network gas fee. Optional paid tiers add monitoring/auto-revocation.
- Your chain’s explorer checker — e.g. Etherscan’s Token Approval tool (ERC-20/721/1155), with the same tool on Basescan, Polygonscan, Arbiscan and siblings. Paste an address to view read-only; connect the wallet to revoke.
Type the address yourself or use a saved bookmark — fake “revoke” sites exist. A real checker never asks for your recovery phrase.
Step 2: Review what each approval can reach#
Prioritise: unlimited token allowances, setApprovalForAll entries you can’t tie to a marketplace you still use, contracts you don’t recognise, and anything approved right before suspicious activity.
Step 3: Revoke#
- Select revoke / remove / set allowance to 0
- Confirm the transaction in your wallet
- Expect a small gas fee per revocation — each is a real on-chain transaction
If you’re unsure what gas fees are, read what are gas fees in NFTs.
Step 4: Confirm removal#
- Refresh the dashboard — the approval should show as revoked or allowance 0
- Repeat for anything else you don’t need
Two things revoking is NOT#
- Not transaction cancellation. Approvals revoke future permission — they cannot reverse a transfer that already happened. Completed transactions are final.
- Not site disconnection. Removing a site from your wallet’s “connected apps” stops it seeing your address — the approvals it holds stay live until revoked on-chain. Do both, in that order of importance.
When to make this routine#
Revoke after any suspicious interaction, after minting on new or unknown sites, and whenever you stop using a marketplace or dApp. Beyond incidents, a periodic approval review — monthly is a reasonable cadence many users adopt, not a rule — keeps exposure small. Monitoring wallet activity pairs well with it.
A note on Solana#
Standing approvals are mostly an EVM pattern. Solana wallets interact per-transaction and token accounts can carry a single capped “delegate” — routine Solana hygiene means disconnecting untrusted sites inside the wallet, and checking delegate settings if you granted one. The drain mechanics differ; the habit of reviewing what can touch your assets is the same.
Bottom line#
Revoking approvals takes minutes and costs a few cents — and it removes the mechanism behind most NFT drains. Protect the habit by reviewing approvals regularly, avoiding unlimited allowances where a smaller one works, and keeping high-value NFTs in a wallet you connect sparingly. For the broader routine see how to revoke wallet permissions safely, and keep the NFT security checklist bookmarked.
