Scam patterns
Malicious token approvals
A transaction grants a spender authority over assets already held by the victim.
Research articles and reference entries are published in English. Navigation is available in seven languages.
In this article
Overview
A transaction grants a spender authority over assets already held by the victim.
Why it matters
The spender can wait and transfer tokens later without another signature.
What to check
Record token, owner, spender, limit and transaction hash, then revoke unnecessary authority.