ERC-20 allowance
An ERC-20 allowance lets a spender transfer up to the approved amount. Revocation sets that allowance to zero.
Approval Revocation
Remove access you no longer trust.
A token approval can let a contract or delegate move tokens after you close the dApp. When you hear about a hack, one hold on Apple Watch starts Emergency Lockdown.
On Apple Watch
Emergency Lockdown covers token permissions, durable nonces, and wallet delegations.
- Token permissions
- ERC-20, Permit2, SPL, and Token-2022
- Solana authority
- Token delegates and durable nonce accounts
- EVM authority
- EIP-7702 wallet delegations
Emergency response
One hold starts Emergency Lockdown.
Cryptograph scans for active permissions and account authorities it can revoke. You review the number of items on each network before holding to revoke.
- 01Open Emergency Lockdown on Apple Watch when a protocol is compromised or you no longer trust existing access.
- 02Cryptograph scans for active token approvals, Solana delegates, durable nonces, and EVM wallet delegations.
- 03Review the number of items on each network and any EVM wallet delegations Cryptograph finds.
- 04Hold to Revoke once. Cryptograph submits the required transactions and reports anything it could not remove.
Routine cleanup
You can remove one permission at a time.
You approve the revocation on Apple Watch. The watch decodes it for itself and signs the transaction it showed you.
Permit2 allowance
A Permit2 allowance can include an amount and expiration for one spender. Revocation sets both to zero.
Solana delegate
A Solana delegate can spend tokens from one token account. Revocation removes that authority through the Token or Token-2022 program.
Solana durable nonce
A durable nonce can keep a signed Solana transaction valid until the nonce changes. Closing the account invalidates that nonce and returns its locked SOL to the wallet.
EVM wallet delegation
An EIP-7702 wallet delegation lets delegate code control an EVM account. Emergency Lockdown clears the delegation on supported networks.
Contract identity
A trusted name appears only when the network and address match Cryptograph's reviewed registry. Unknown contracts keep their full address.
Limits
Access remains active until the network confirms the revocation.
A revocation cannot recover tokens that already moved or repair a compromised protocol.
Emergency Lockdown can create multiple transactions. You need enough of each network's native asset to pay the fees.
Cryptograph removes only the permissions and account authorities it recognizes on supported networks. Other forms of access may require a different revocation tool.