Recently, I saw someone say, "I just approve with unlimited limits to save trouble," and I really can't help but feel a bit overwhelmed... Contract authorization is like leaving a door key inserted; if you don't revoke it, it might not cause immediate issues, but once the contract on the other side gets compromised/logic is changed/ front-end is hijacked, your funds could be easily taken away. Anyway, I now treat the interaction as a "wash up + revoke authorization" process, just like sleeping—if I don't do it, I always feel uneasy.



By the way, I was reminded of the recent NFT royalty debate, which is basically a fight over liquidity and revenue sharing. But the most overlooked risk for ordinary users is permission risks: repeatedly swapping in the secondary market, multiple aggregators, authorization records looking like a small essay... I usually keep only my frequently used addresses, and clear out the rest periodically to avoid confusion when reconciling accounts later.

That line you just said, "revoking authorization is too troublesome"... I get it, but doing it once is better than waking up one day to find your balance gone. That's all for now.
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin