DeFi Security AllianceRequest an audit
Menu

Tool selection guide

Wallet security tools: approvals and transaction inspection

Choose the tool by the permission you are trying to understand. An approval dashboard shows what a spender may access. A pre-signing preview estimates the effects of a proposed interaction. Neither restores a disclosed seed phrase or guarantees how a contract will behave after state changes.

Sources checked . Public interface/documentation reviewed; no wallet was connected and no approval was changed.

Distinguish signature deadlines and allowance expiration.

Decide what your review needs

  • Identify the network, account and permission type. Token allowances and signature-based authorizations can require different investigation paths.
  • Inspect the spender address and the relevant contract context. A familiar label does not establish that the address is the intended deployment.
  • Review the exact transaction or signature prompt before signing. A warning-free preview is only one input to the decision.
  • For a compromised key, separate migration to a secure authority from allowance cleanup. Removing one allowance does not remove control from someone holding the key.

Compare inputs, results and limits

Options for wallet security tools
Tool & accessInput → outputWhen it fitsLimits & source
Revoke.cash

EVM
Web app / service

Input: Wallet address and selected network

Output: Approval inventory and proposed revocation actions

You need to inspect allowances and identify a spender before an authorized revocation.

Revocation requires an on-chain transaction and does not recover assets already transferred.

Documentation reviewed. Official source

Rabby Wallet

EVM
Repository

Input: A proposed EVM wallet interaction

Output: Pre-signing transaction information and risk prompts

You want a wallet interface that presents transaction context for review.

Simulation and warnings cannot guarantee the safety of a transaction or protect a disclosed seed phrase.

Documentation reviewed. Official source

Pocket Universe

EVM
Web app / service

Input: Supported browser-wallet interaction

Output: Transaction preview and scam-screening signals

You want an additional review layer and can verify current wallet/chain compatibility.

Check current chain and wallet support. Simulation cannot predict every future contract-state change.

Documentation reviewed. Official source

Public artifact walkthrough

Inspect first, then review a revocation as a new transaction

Revoke.cash offers address entry as an inspection path as well as wallet connection. Use the read-only path to identify the network, token and spender in question. Revocation is a separate on-chain action and needs its own review. The site's current interface also describes paid options, so verify fees and the exact action rather than assuming every workflow is free.

  1. Enter the public address for inspection and verify that the selected network is the one where the permission exists.
  2. Compare the spender and allowance with the intended application. Preserve the observation time because permissions can change.
  3. If authorized to revoke, review the transaction and its fees in the wallet. Verify the resulting allowance after confirmation; do not claim that previously transferred assets were recovered.

Inspect the published artifact