Free tool
Token approval checker
Every contract that can move your tokens without asking again, ranked by risk. Revoke the ones you no longer use in one click from your own wallet.
How risk is scored
- Critical: the spender is a regular wallet, not a contract. Legitimate apps never ask for this.
- High: an unlimited allowance, or a full NFT-collection operator, granted to a contract we do not recognize.
- Medium: unlimited allowances to well-known protocols such as Uniswap, 1inch or Permit2. They are not malicious, but if the protocol is ever exploited they are fully exposed.
- Low: limited allowances to known protocols.
"At risk" shows the lower of the allowance and your current balance: what the spender could take right now.
Spoofed approvals
Spam tokens often emit fake Approval events that appear to come from your address. CryptGuard checks who actually sent each approval transaction and hides the ones you never signed.
FAQ
Frequently asked questions
What is a token approval?
When you use a DEX, lending app or NFT marketplace, you let its contract move a token on your behalf. That permission stays active until you revoke it, often for an unlimited amount.
Why should I revoke old approvals?
If an approved contract is later exploited, or was malicious from the start, it can take every approved token without asking you again. Revoking unused approvals removes that risk.
Does revoking cost gas?
Yes. A revoke is a normal transaction,
approve(spender, 0) or setApprovalForAll(operator, false), sent from your own wallet. CryptGuard never holds your keys and cannot revoke for you.Why are some approvals marked critical?
An approval to a regular wallet address instead of a contract is almost always the result of a phishing signature. Unlimited approvals to unrecognized contracts are marked high.
Watch your wallet around the clock
A scan is a snapshot. The Binance drain took 3 minutes 24 seconds. CryptGuard checks your addresses every 30 seconds and alerts you on Telegram, Discord or Slack.