{"id":3919,"date":"2026-10-12T10:37:50","date_gmt":"2026-10-12T10:37:50","guid":{"rendered":"https:\/\/nownodes.io\/blog\/?p=3919"},"modified":"2026-10-12T10:37:52","modified_gmt":"2026-10-12T10:37:52","slug":"token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit","status":"publish","type":"post","link":"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/","title":{"rendered":"Token Approvals Explained: How to Check and Revoke Allowances (+ EIP-2612 Permit)"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A token approval is a permission you give a smart contract to spend a set amount of your tokens. You grant it once, and it stays active until you cancel it. That standing permission is what makes approvals both useful and dangerous.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The numbers make the risk concrete. In 2025, wallet-drainer phishing stole <a href=\"https:\/\/drops.scamsniffer.io\/scam-sniffer-2025-crypto-phishing-losses-fall-83-to-84-million\/\" rel=\"nofollow noopener noreferrer\">$83.85 million across EVM chains<\/a>, and the single largest theft came from one malicious Permit signature. Many victims simply had old, unlimited approvals sitting in their wallets.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This guide explains what token approvals are, how to check and revoke them with free tools, and how signature-based flows like EIP-2612 and Permit2 change what you need to watch for.<\/p>\n\n\n<h2 class=\"wp-block-heading\" id=\"what-is-a-token-allowance\">What Is a Token Allowance?<\/h2>\n\n\n<p class=\"wp-block-paragraph\">A token allowance is the amount a smart contract is permitted to move from your wallet on your behalf. When a decentralized app (dApp) asks you to &#8220;approve&#8221; a token before a swap or deposit, it is requesting that allowance. The approval itself is a transaction you sign and pay gas for.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The term comes from the <a href=\"https:\/\/ethereum.org\/en\/developers\/docs\/standards\/tokens\/erc-20\/\" rel=\"nofollow noopener noreferrer\">ERC-20 token standard<\/a>, which defines how most fungible tokens on Ethereum behave. Without an approval, a contract cannot touch your tokens at all. With one, it can move up to the approved amount whenever it wants.<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"approve-and-allowance-explained\">approve() and allowance() Explained<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Two functions do the work. <code>approve(spender, amount)<\/code> sets the allowance, where the spender is the contract you are authorizing. <code>allowance(owner, spender)<\/code> reads how much is currently approved. When the dApp needs your tokens, it calls <code>transferFrom<\/code> to pull up to that approved amount.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NFTs work a little differently. ERC-721 and ERC-1155 collections use <code>setApprovalForAll(operator, true)<\/code>, which grants a contract control over your entire collection in one go. That makes NFT approvals higher stakes than a single-token allowance.<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"finite-vs-unlimited-approvals\">Finite vs. Unlimited Approvals<\/h3>\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"683\" src=\"https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/image-68-1024x683.png\" alt=\"\" class=\"wp-image-3921\" srcset=\"https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/image-68-1024x683.png 1024w, https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/image-68-300x200.png 300w, https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/image-68-768x512.png 768w, https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/image-68.png 1536w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Most dApps request the maximum possible value, <code>2^256 \u2212 1<\/code>, so you only ever approve a token once. It is convenient and saves you gas on repeat visits. The trade-off is that you hand a contract an unlimited spending cap on that token.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A finite approval caps the risk. If you approve exactly 100 USDC, that is the most a buggy or malicious contract can take. Some wallets let you edit the amount at signing time, which is worth doing for high-value tokens.<\/p>\n\n\n<h2 class=\"wp-block-heading\" id=\"why-unlimited-allowances-are-risky\">Why Unlimited Allowances Are Risky<\/h2>\n\n\n<p class=\"wp-block-paragraph\">Approvals do not expire on their own. They persist until you revoke them, which means a contract you used once in 2023 may still hold permission to move your tokens today. If that contract is later exploited, or was malicious from the start, it can drain the approved amount at any time.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The scale is well documented. <a href=\"https:\/\/cointelegraph.com\/news\/crypto-phishing-losses-fell-83-percent-2025-wallet-drainers\" rel=\"nofollow noopener noreferrer\">Scam Sniffer&#8217;s 2025 report<\/a> recorded $83.85 million in drainer losses across 106,106 victims, down 83% from roughly $494 million the year before. Permit and Permit2 signatures alone accounted for 38% of losses among incidents over $1 million, and the biggest single theft reached $6.5 million.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The decline is good news, but the threat has not gone away. The report warned that the &#8220;drainer ecosystem remains active,&#8221; with new drainers appearing as old ones shut down. One forgotten approval is often all an attacker needs.<\/p>\n\n\n<h2 class=\"wp-block-heading\" id=\"who-needs-to-check-their-allowances\">Who Needs to Check Their Allowances?<\/h2>\n\n\n<p class=\"wp-block-paragraph\">Anyone who connects a wallet to a dApp accumulates approvals, usually without noticing. If you have ever swapped on a DEX, supplied liquidity, lent tokens, or listed an NFT, you have granted permissions that are probably still live.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A few moments are worth a specific check:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>After using a new or unfamiliar dApp for the first time<\/li>\n\n\n\n<li>When a protocol you have interacted with reports a hack or exploit<\/li>\n\n\n\n<li>As routine monthly hygiene, especially on your main wallet<\/li>\n\n\n\n<li>Before consolidating funds or moving to a fresh wallet<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Active DeFi users and NFT traders face the most exposure, but the habit matters for everyone. A single <code>setApprovalForAll<\/code> on a compromised marketplace contract can put a whole NFT collection at risk.<\/p>\n\n\n<h2 class=\"wp-block-heading\" id=\"how-to-check-and-revoke-your-allowances\">How to Check and Revoke Your Allowances<\/h2>\n\n\n<p class=\"wp-block-paragraph\">You do not need to read raw contract data to manage approvals. Two free, widely trusted tools cover almost every situation, and some wallets now handle it natively. In every case, revoking is a transaction, so it costs a small gas fee.<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"using-revokecash\">Using Revoke.cash<\/h3>\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/revoke.cash\/\" rel=\"nofollow noopener noreferrer\">Revoke.cash<\/a> is the most widely used approval manager, free and open source since 2019. According to the project, it has helped prevent over $140 million in losses and supports 100+ networks.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Go to revoke.cash directly by typing the address yourself, since phishing clones exist.<\/li>\n\n\n\n<li>Connect your wallet, or paste any address for a read-only view.<\/li>\n\n\n\n<li>Switch to the network you want to inspect. Approvals are per-chain, so a mainnet check will not show your Base or Arbitrum permissions.<\/li>\n\n\n\n<li>Review the list of spenders, amounts, and how recently each was used.<\/li>\n\n\n\n<li>Click <strong>Revoke<\/strong> next to anything you do not recognize or no longer use, then confirm the transaction.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Paid tiers add a multichain dashboard and automatic revoking, which watches your approvals and cancels risky ones for you through MetaMask&#8217;s support for the ERC-7715 permission standard. The free tier is enough for manual cleanups.<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"using-etherscan\">Using Etherscan<\/h3>\n\n\n<p class=\"wp-block-paragraph\">For Ethereum mainnet, the block explorer has a built-in checker.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open Etherscan&#8217;s Token Approval Checker (found under Services \u2192 Token Approvals).<\/li>\n\n\n\n<li>Search your address and browse the ERC-20, ERC-721, and ERC-1155 tabs.<\/li>\n\n\n\n<li>Connect your wallet, click <strong>Revoke<\/strong> on the approval you want to cancel, and confirm.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Each chain has its own explorer, so you would use the matching tool for Polygon, BNB Smart Chain, and others. The flow is otherwise the same.<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"checking-inside-your-wallet\">Checking Inside Your Wallet<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Some wallets now manage approvals without a separate site. <a href=\"https:\/\/rabby.io\/\" rel=\"nofollow noopener noreferrer\">Rabby<\/a> includes a built-in approval manager that lists every active permission across networks and lets you batch-revoke in one place. MetaMask and Phantom still lack native allowance management, so pair them with Revoke.cash or a block explorer.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A few practical points apply to every method:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Revoking is one transaction per approval, so several cancellations mean several wallet pop-ups.<\/li>\n\n\n\n<li>The gas you originally paid to grant an approval is not refunded.<\/li>\n\n\n\n<li>Approvals are tied to a single network, so check each chain you use.<\/li>\n\n\n\n<li>Anyone with your seed phrase can simply re-grant a revoked approval, so revoking is not a fix for a compromised wallet.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Building your own checker?<\/strong> Reading allowances at scale means querying <code>allowance(owner, spender)<\/code> for many token-spender pairs and tracking <code>Approval<\/code> events on-chain. That takes reliable, low-latency access to the chain. NOWNodes provides that blockchain infrastructure for <a href=\"https:\/\/nownodes.io\/nodes\/ethereum-eth\">Ethereum<\/a> and <a href=\"https:\/\/nownodes.io\/nodes\">120+ networks<\/a>, so a dashboard can read on-chain data without you running the back end yourself.<\/p>\n\n\n<h2 class=\"wp-block-heading\" id=\"eip2612-and-permit2-gasless-permit-signatures\">EIP-2612 and Permit2: Gasless Permit Signatures<\/h2>\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"683\" src=\"https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/image-69-1024x683.png\" alt=\"\" class=\"wp-image-3922\" srcset=\"https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/image-69-1024x683.png 1024w, https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/image-69-300x200.png 300w, https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/image-69-768x512.png 768w, https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/image-69.png 1536w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">A permit lets you approve by signing an off-chain message instead of sending an on-chain <code>approve<\/code> transaction. The approval itself costs no gas, and the spender submits your signature when they need it. This is where approvals get faster, and also where a newer phishing risk lives.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/eips.ethereum.org\/EIPS\/eip-2612\" rel=\"nofollow noopener noreferrer\">EIP-2612<\/a> extends ERC-20 with a <code>permit()<\/code> function. You sign an <a href=\"https:\/\/eips.ethereum.org\/EIPS\/eip-712\" rel=\"nofollow noopener noreferrer\">EIP-712<\/a> structured message, and a dApp or relayer submits it on-chain, often batched with the action in a single transaction. Stablecoins like USDC and DAI support it natively.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/docs.uniswap.org\/contracts\/permit2\/overview\" rel=\"nofollow noopener noreferrer\">Permit2<\/a> is Uniswap&#8217;s answer for every other token. It is a single contract deployed to the same address, <code>0x000000000022D473030F116dDEE9F6B43aC78BA3<\/code>, on all chains, and it has been live since November 2022. You approve the Permit2 contract once with a standard <code>approve<\/code>, then sign per-use messages for anything after that. It works with any ERC-20, even tokens without native permit, and powers Uniswap&#8217;s Universal Router.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th><\/th><th>Standard approve()<\/th><th>EIP-2612 permit<\/th><th>Permit2<\/th><\/tr><\/thead><tbody><tr><td>How you authorize<\/td><td>On-chain transaction<\/td><td>Off-chain signature<\/td><td>One approval, then signatures<\/td><\/tr><tr><td>Gas to approve<\/td><td>Yes<\/td><td>None<\/td><td>Once, for the initial approval<\/td><\/tr><tr><td>Works with any ERC-20<\/td><td>Yes<\/td><td>Only tokens with <code>permit()<\/code><\/td><td>Yes<\/td><\/tr><tr><td>Where to revoke<\/td><td>Revoke.cash \/ explorer<\/td><td>Revoke.cash \/ explorer<\/td><td>Revoke.cash \/ explorer<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n<h3 class=\"wp-block-heading\" id=\"the-signaturephishing-catch\">The Signature-Phishing Catch<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Permit signatures are a favorite tool for scammers. A signed permit does not look like a token transfer, and it may not leave the obvious on-chain trail you would see from a standard <code>approve<\/code>. Drainers hide these requests behind friendly prompts like &#8220;Verify Wallet&#8221; or &#8220;Claim Airdrop,&#8221; which feel lower-risk than confirming a transaction.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The data backs up the concern: Permit and Permit2 abuse drove 38% of large drainer losses in 2025. The defense is simple to state and hard to skip. Read what you are signing, treat a signature request as seriously as a transaction, and never approve a message you do not understand. Permit2 allowances can be revoked with the same tools as any other approval.<\/p>\n\n\n<h2 class=\"wp-block-heading\" id=\"keeping-approvals-under-control\">Keeping Approvals Under Control<\/h2>\n\n\n<p class=\"wp-block-paragraph\">Token approvals are a normal part of using DeFi and NFTs. They only become a problem when they pile up unseen. Keep the list short, approve finite amounts when your wallet allows it, and revoke permissions once you are done with a protocol.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Build a light routine: check your allowances on a schedule, clean up anything unused, and apply the same caution to off-chain signatures that you give on-chain transactions. A few minutes of review is far cheaper than losing funds to a permission you forgot you granted.<\/p>\n\n\n<h2 class=\"wp-block-heading\" id=\"faq\">FAQ<\/h2>\n\n<h3 class=\"wp-block-heading\" id=\"does-revoking-an-allowance-change-my-balance\">Does revoking an allowance change my balance?<\/h3>\n\n\n<p class=\"wp-block-paragraph\">No. Revoking only cancels a contract&#8217;s permission to move your tokens. Your balance stays exactly where it is; you are removing a spending right, not transferring anything. The revoke transaction does cost a small gas fee.<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"how-often-should-i-review-my-permissions\">How often should I review my permissions?<\/h3>\n\n\n<p class=\"wp-block-paragraph\">A monthly check is a reasonable baseline for active users. Beyond that, review right after trying an unfamiliar dApp, and immediately if a protocol you have approved reports a security incident.<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"does-a-hardware-wallet-protect-against-wallet-drainers\">Does a hardware wallet protect against wallet drainers?<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Not by itself. A hardware wallet requires physical confirmation, but if you approve or sign for a malicious contract, it can still spend up to the amount you authorized. The real protection is reviewing requests and declining anything suspicious, not the device.<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"whats-the-difference-between-revoking-and-lowering-an-allowance\">What&#8217;s the difference between revoking and lowering an allowance?<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Revoking sets the allowance to zero and cancels access entirely. Lowering it means setting a smaller spend limit so you can keep using a trusted dApp with less exposure. Both reduce risk; revoking removes it.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A token approval is a permission you give a smart contract to spend a set amount of your tokens. You grant it once, and it stays active until you cancel it. That standing permission is what makes approvals both useful and dangerous. The numbers make the risk concrete. In 2025, wallet-drainer phishing stole $83.85 million [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":3920,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","_lmt_disableupdate":"","_lmt_disable":"","_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3919","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"blocksy_meta":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Check &amp; Revoke Token Approvals<\/title>\n<meta name=\"description\" content=\"Token approvals let dApps spend your tokens, and forgotten ones are a top drain risk. Learn how to check, revoke, and use EIP-2612 permit and Permit2 safely.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Check &amp; Revoke Token Approvals\" \/>\n<meta property=\"og:description\" content=\"Token approvals let dApps spend your tokens, and forgotten ones are a top drain risk. Learn how to check, revoke, and use EIP-2612 permit and Permit2 safely.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/\" \/>\n<meta property=\"og:site_name\" content=\"NOWNodes Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-12T10:37:50+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-12T10:37:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/nodes_1-96.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2400\" \/>\n\t<meta property=\"og:image:height\" content=\"1200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u0410nastasia\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@nownodes\" \/>\n<meta name=\"twitter:site\" content=\"@nownodes\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u0410nastasia\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/\"},\"author\":{\"name\":\"\u0410nastasia\",\"@id\":\"https:\/\/nownodes.io\/blog\/#\/schema\/person\/0890ec68e813adecb93c18ee00e1e7a8\"},\"headline\":\"Token Approvals Explained: How to Check and Revoke Allowances (+ EIP-2612 Permit)\",\"datePublished\":\"2026-10-12T10:37:50+00:00\",\"dateModified\":\"2026-10-12T10:37:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/\"},\"wordCount\":1658,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/nownodes.io\/blog\/#organization\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/\",\"url\":\"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/\",\"name\":\"How to Check & Revoke Token Approvals\",\"isPartOf\":{\"@id\":\"https:\/\/nownodes.io\/blog\/#website\"},\"datePublished\":\"2026-10-12T10:37:50+00:00\",\"dateModified\":\"2026-10-12T10:37:52+00:00\",\"description\":\"Token approvals let dApps spend your tokens, and forgotten ones are a top drain risk. Learn how to check, revoke, and use EIP-2612 permit and Permit2 safely.\",\"breadcrumb\":{\"@id\":\"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/nownodes.io\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Uncategorized\",\"item\":\"https:\/\/nownodes.io\/blog\/category\/uncategorized\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Token Approvals Explained: How to Check and Revoke Allowances (+ EIP-2612 Permit)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nownodes.io\/blog\/#website\",\"url\":\"https:\/\/nownodes.io\/blog\/\",\"name\":\"NOWNodes Blog\",\"description\":\"Your first-to-go source of development guides, web3 analytics and most recent news about NOWNodes\",\"publisher\":{\"@id\":\"https:\/\/nownodes.io\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nownodes.io\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/nownodes.io\/blog\/#organization\",\"name\":\"NOWNodes Blog\",\"url\":\"https:\/\/nownodes.io\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/nownodes.io\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2024\/02\/cropped-New-Logo-NN.png\",\"contentUrl\":\"https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2024\/02\/cropped-New-Logo-NN.png\",\"width\":1164,\"height\":1164,\"caption\":\"NOWNodes Blog\"},\"image\":{\"@id\":\"https:\/\/nownodes.io\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/twitter.com\/nownodes\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/nownodes.io\/blog\/#\/schema\/person\/0890ec68e813adecb93c18ee00e1e7a8\",\"name\":\"\u0410nastasia\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/nownodes.io\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1de24ab8dcdd7ec30f6adaf78b56bc1eda421f87575b7e103c8fc3fc4420e833?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1de24ab8dcdd7ec30f6adaf78b56bc1eda421f87575b7e103c8fc3fc4420e833?s=96&d=mm&r=g\",\"caption\":\"\u0410nastasia\"},\"url\":\"https:\/\/nownodes.io\/blog\/author\/nasty-nownodes\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Check & Revoke Token Approvals","description":"Token approvals let dApps spend your tokens, and forgotten ones are a top drain risk. Learn how to check, revoke, and use EIP-2612 permit and Permit2 safely.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/","og_locale":"en_US","og_type":"article","og_title":"How to Check & Revoke Token Approvals","og_description":"Token approvals let dApps spend your tokens, and forgotten ones are a top drain risk. Learn how to check, revoke, and use EIP-2612 permit and Permit2 safely.","og_url":"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/","og_site_name":"NOWNodes Blog","article_published_time":"2026-10-12T10:37:50+00:00","article_modified_time":"2026-10-12T10:37:52+00:00","og_image":[{"width":2400,"height":1200,"url":"https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2026\/10\/nodes_1-96.jpg","type":"image\/jpeg"}],"author":"\u0410nastasia","twitter_card":"summary_large_image","twitter_creator":"@nownodes","twitter_site":"@nownodes","twitter_misc":{"Written by":"\u0410nastasia","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/#article","isPartOf":{"@id":"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/"},"author":{"name":"\u0410nastasia","@id":"https:\/\/nownodes.io\/blog\/#\/schema\/person\/0890ec68e813adecb93c18ee00e1e7a8"},"headline":"Token Approvals Explained: How to Check and Revoke Allowances (+ EIP-2612 Permit)","datePublished":"2026-10-12T10:37:50+00:00","dateModified":"2026-10-12T10:37:52+00:00","mainEntityOfPage":{"@id":"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/"},"wordCount":1658,"commentCount":0,"publisher":{"@id":"https:\/\/nownodes.io\/blog\/#organization"},"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/","url":"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/","name":"How to Check & Revoke Token Approvals","isPartOf":{"@id":"https:\/\/nownodes.io\/blog\/#website"},"datePublished":"2026-10-12T10:37:50+00:00","dateModified":"2026-10-12T10:37:52+00:00","description":"Token approvals let dApps spend your tokens, and forgotten ones are a top drain risk. Learn how to check, revoke, and use EIP-2612 permit and Permit2 safely.","breadcrumb":{"@id":"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/nownodes.io\/blog\/token-approvals-explained-how-to-check-and-revoke-allowances-eip-2612-permit\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/nownodes.io\/blog"},{"@type":"ListItem","position":2,"name":"Uncategorized","item":"https:\/\/nownodes.io\/blog\/category\/uncategorized"},{"@type":"ListItem","position":3,"name":"Token Approvals Explained: How to Check and Revoke Allowances (+ EIP-2612 Permit)"}]},{"@type":"WebSite","@id":"https:\/\/nownodes.io\/blog\/#website","url":"https:\/\/nownodes.io\/blog\/","name":"NOWNodes Blog","description":"Your first-to-go source of development guides, web3 analytics and most recent news about NOWNodes","publisher":{"@id":"https:\/\/nownodes.io\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nownodes.io\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/nownodes.io\/blog\/#organization","name":"NOWNodes Blog","url":"https:\/\/nownodes.io\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nownodes.io\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2024\/02\/cropped-New-Logo-NN.png","contentUrl":"https:\/\/nownodes.io\/blog\/wp-content\/uploads\/2024\/02\/cropped-New-Logo-NN.png","width":1164,"height":1164,"caption":"NOWNodes Blog"},"image":{"@id":"https:\/\/nownodes.io\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/twitter.com\/nownodes"]},{"@type":"Person","@id":"https:\/\/nownodes.io\/blog\/#\/schema\/person\/0890ec68e813adecb93c18ee00e1e7a8","name":"\u0410nastasia","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nownodes.io\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1de24ab8dcdd7ec30f6adaf78b56bc1eda421f87575b7e103c8fc3fc4420e833?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1de24ab8dcdd7ec30f6adaf78b56bc1eda421f87575b7e103c8fc3fc4420e833?s=96&d=mm&r=g","caption":"\u0410nastasia"},"url":"https:\/\/nownodes.io\/blog\/author\/nasty-nownodes"}]}},"modified_by":"\u0410nastasia","_links":{"self":[{"href":"https:\/\/nownodes.io\/blog\/wp-json\/wp\/v2\/posts\/3919","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nownodes.io\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nownodes.io\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nownodes.io\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nownodes.io\/blog\/wp-json\/wp\/v2\/comments?post=3919"}],"version-history":[{"count":1,"href":"https:\/\/nownodes.io\/blog\/wp-json\/wp\/v2\/posts\/3919\/revisions"}],"predecessor-version":[{"id":3923,"href":"https:\/\/nownodes.io\/blog\/wp-json\/wp\/v2\/posts\/3919\/revisions\/3923"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nownodes.io\/blog\/wp-json\/wp\/v2\/media\/3920"}],"wp:attachment":[{"href":"https:\/\/nownodes.io\/blog\/wp-json\/wp\/v2\/media?parent=3919"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nownodes.io\/blog\/wp-json\/wp\/v2\/categories?post=3919"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nownodes.io\/blog\/wp-json\/wp\/v2\/tags?post=3919"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}