← Back to Fix archive
Security Recovery
What to Do After Approving a Suspicious Contract
Learn what token approvals can do and how to respond after approving a suspicious spender.
Quick answer
What this usually means
A suspicious approval may allow a contract to move approved tokens, but it does not automatically expose the seed phrase.
Common causes
Why it happens
- A fake claim page requested token approval.
- A malicious DEX or router asked for unlimited allowance.
- The user approved an unknown spender.
- The approval was made on the wrong site.
Fix path
What to check first
- Stop using the suspicious site.
- Check approvals on the correct network.
- Revoke suspicious allowances.
- Move valuable assets if risk remains high.
- Review transaction history for token movement.
Safety note
Do not make the problem worse
- Revoking approval costs gas but can reduce future risk.
- If the seed phrase was also exposed, use a new wallet.
- Do not approve a second transaction to fix the first one unless verified.