Naar hoofdinhoud
Live markt
Block #9

Svindel og scams

What are you actually signing?

A wallet drainer does not steal keys; it gets you to approve a transaction or signature that grants access to your tokens.

Wouter De ClerckSkrevet av Economieredacteur, LeuvenOppdatert Kvalitetssikret av redaksjonen

Approvals: permission without a limit

Token standards let you allow a contract to move tokens on your behalf, and many apps request unlimited allowance by default.

That permission stays valid until revoked, so a contract compromised months later can still move your balance.

Permit signatures

A permit is a gasless signature. It feels harmless but can grant the same permission as an approval.

Always read the domain and message type; refuse unknown spenders or huge values.

  • Always check spender and amount
  • Be extra critical of gasless signatures
  • Use a separate wallet for experiments

Reviewing and revoking

A revoke tool shows which contracts have permission on your address; review quarterly and revoke what you do not use.

Revoking costs gas but far less than the average drainer.

Compartmentalise

Split addresses: a cold wallet that never connects to sites, a hot wallet for daily use, and a burner for unknown claims.

This limits the damage of a mistake to one compartment.

Ofte stilte spørsmål

What is a wallet drainer?

Malicious site code that tricks you into an approval or signature letting it move your tokens or NFTs.

How do I revoke approvals?

Through your wallet's revoke function or a known revoke tool, confirming a transaction that sets the allowance to zero.

Does a hardware wallet protect me?

Only if you read the device screen; a signed malicious transaction is valid from hardware too.

Les videre

Newsletter

Bitcoin for breakfast, Brussels for lunch

One short email with what actually matters: prices, regulation and the banks that move. No hype, no noise.

  • Daily at 07:00
  • 2 minute read
  • No spam

Free. Unsubscribe in one click.