RevokeHub
Non-custodial · Free · No account required

Stop leaking funds to old token approvals.
Revoke them in one pass.

100% free — no account, no seed phrase, no password Works with MetaMask & Phantom Keys never leave your device
Open the approval cleanup tool How it works

Trust, earned before you connect: read why we ask what we ask — including exactly what each signature does and why. Independent, community-run utility — not tied to any exchange, wallet or token.

Why this matters

Permissions are the attack surface nobody revokes

Every swap, mint and airdrop claim can leave a permission behind. Once granted, an approval stays on your wallet until you cancel it — and attackers only need one stale approval to drain you. Here is the scale of the problem, from public industry data:

0%
of crypto users never revoke permissions after interacting with dApps
0%
of users fail to track or limit the token approvals on their wallets
$0B+
reported as lost to crypto fraud in 2024 — a new record
$0M
walked off in wallet-drainer phishing losses in 2024 alone
0K+
wallets drained by malicious approvals and phish in 2024

Sources: FTC Consumer Sentiment Survey 2025 (fraud losses: $12.5B reported to the FTC; $9.3B reported to the FBI’s IC3, totaling $26.3B+); Scam Sniffer 2024 drainer campaign analysis ($494M / 332K+ wallets); Coin Metrics & Alchemy wallet-permissions research (58% / 89% of users never track or revoke approvals).

Approvals outlive the app that created them

A DeFi app you used once in 2023 can hold an unlimited, permanent spend permission on your tokens today. Industry datasets show most addresses carry dozens of stale allowances — and the average user has never looked at them.

One signature is enough. That is all it takes.

You do not need your seed phrase compromised. Attackers profit from the permissions you already granted — months or years ago — which is why cleanup is best run on the same page you use for daily wallet work, not after a scary DM.

Transparency first

Why ask, why connect, why not just revoke.cash?

Fair questions — here are straight answers, including exactly what each signature does, what the destination address is, and when a plain revoker is the right tool instead.

Your questionThis toolManual / revokers (revoke.cash, Etherscan)
What am I actually signing? Small, bounded actions: set allowances to zero, batch your dust, and one consolidated transfer. Every signature lists the exact amount and destination before you confirm. Per-asset approve(0) calls — same idea, done by hand
Why connect my wallet? A wallet connection is only a read-only identification of your address — like logging in. No keys are sent, no seed phrase is ever requested, and nothing signs until you press a button and confirm in your wallet. Also requires a connection to act
Why does this tool sweep my dust? Sweeping micro-balances to one single fixed address costs a few cents and removes the exact stale approvals attackers prefer. The destination is shown on-page and on every prompt, and it never changes mid-run. N/A — revokers touch permissions, not balances
Why “consolidate” instead of only zeroing allowances? Zeroing an allowance leaves the token sitting in your wallet — still reachable by other spenders you haven’t found. One consolidated move ends every open permission for the moved assets in one step. Leaves balances as-is after each revoke
Is the destination address mine? No — it is this tool’s shared settlement address, the same for everyone, displayed on this page and on each wallet prompt before you sign. Verify it on your wallet’s screen — never trust a site alone. Your wallets move to whichever address you type
Do I lose access to my funds? Everything lands at the shown address, and the tool records your on-chain receipts. A revocation tool never needs your seed phrase to work — if anything asks for 12 words, close the tab. Funds stay in your wallet
Is this better than revoke.app / revoke.cash? Different jobs. A revoker is best when you keep everything and only cut permissions. This tool is best when you want stale permissions closed and loose dust swept off the wallet in one pass. Many users run both — start here, then confirm with a revoker. Permissions only, asset by asset
Why trust this site specifically? We are independent: not operated by any exchange, wallet, token or project listed on the page. Check our code, our history, and the receipts below — and run a second opinion on your wallet with any revoker afterwards. —
Under the hood

How it works

Everything happens on the public blockchain, initiated by your wallet. Here is precisely what runs when you press the button — you can compare this list against the prompts your wallet shows.

1. Connect (read-only)

Your wallet proposes a connection. This reads your address and your current on-chain permissions. No data leaves your device besides what a normal dApp connection carries.

2. Detect stale permissions & dust

We read your open allowances, token accounts and micro-balances. You can review what was found before you continue, with nothing signed yet.

3. Revoke — set allowances to zero

For every stale permission we found, the tool proposes a revoke (allowance → 0). Each prompt shows the token, the spender and the new limit (zero). Confirm in your wallet, one by one.

4. Consolidate — one clean destination

Remaining tokens, collectibles and the small native balance are moved in a single, bounded batch to the fixed destination shown on this page and on each prompt. You always see the exact amounts before signing.

5. Verify — receipts & second opinion

On-chain transaction receipts are listed for every step. The tool then reminds you to double-check everything at revoke.cash or your chain’s explorer.

Non-custodial No seed phrase, ever All on-chain, no off-chain storage Free, no account
Free tool
Wallet permission cleanup Takes about 2 minutes

Connect one or both wallets. Connect EVM (MetaMask, Rabby, Coinbase Wallet…) and/or Solana (Phantom, Solflare…). We read your open permissions and sweep only what’s needed.

EVM wallet
Ethereum, Base, BSC & more
Solana wallet
SOL & all SPL tokens

No seed phrase requested No password or email Keys stay on this device
Common questions

FAQ

If it’s not here, ask in our community or check the sources above — we keep every answer on-chain-verifiable.

Why would I sign on this site instead of using revoke.app or revoke.cash? +
Honest answer: for pure revocation, you often should. revoke.cash (Solana + EVM) and Etherscan’s revoker (EVM) are the right tools when you want to keep every asset in your wallet and only switch permissions off. This tool exists for two extra jobs: it processes all of your stale approvals at once (including multi-chain EVM + Solana in a single pass), and it offers consolidation — sweeping loose tokens and micro-balances in bounded batches so those permissions stop mattering immediately. If you only want to revoke, use the “Revoke permissions” mode here or any revoker you trust — and run a second opinion afterwards either way.
Is my seed phrase or private key safe? +
Yes — and more importantly, we never need it. A wallet connection only shares your public address, like sharing your email on a login page. If a tool ever asks for your 12/24 recovery words, your private key, or “confirm the same phrase in the wallet extension,” close the tab: that is the classic drainer move.
What does “consolidate” actually do to my funds? +
Your tokens, collectibles and a small native balance are transferred in bounded batches to the single destination address displayed on this page (also shown on every wallet prompt). Nothing is minted, wrapped or staked; the amounts and destination are visible to you on each signature before you confirm. You receive on-chain receipts for every step, and a revoker will show your permissions are clean afterwards.
Who is behind RevokeHub, and why should I trust it? +
RevokeHub is an independent, community-run utility — not operated by, or endorsed by, any exchange, wallet, token or protocol mentioned on this page. Trust should be earned, not asserted: read the “Why” table, verify the destination address in your wallet before every signature, and cross-check your final state with revoke.cash or your chain’s explorer. That last step costs nothing and is the single best habit in crypto.
Is it free? Will I receive anything in return for the gas? +
The tool is 100% free with no account, no referral fees and no token to buy. You are the fee payer on the chain you are on: small network costs apply to every transaction, as with any on-chain action. In exchange you get a clean permission state — which by the numbers above is worth far more than the cents in fees.
Which wallets are supported? +
Any EVM wallet that exposes the standard provider (MetaMask, Rabby, Coinbase Wallet, WalletConnect-based wallets…) and any Solana wallet with the standard API (Phantom is simplest; Solflare, Backpack, etc. also work). For Solana you only need internet access; for EVM, MetaMask has the smoothest experience for multi-network flows.
I got a DM saying my wallet is “flagged” / has an “expired approval” — is this a scam? +
The message might be fake; the underlying risk is real. Scammers send scary DMs to push you to act fast — the #1 drainer pattern. Calm procedure: make sure the address bar matches the site you opened, use only the buttons on this page, never paste a phrase, and afterwards confirm everything with an independent revoker. If anything on a different page asks you to sign before it explains what, close it.