← Back to Fix archive
Approvals & Security
What to Do if You Signed a Malicious Message
Understand the risks of malicious wallet signatures and what to do next.
Quick answer
What this usually means
A malicious signature can authorize actions depending on what was signed, especially with permit-style approvals or marketplace permissions.
Common causes
Why it happens
- The message may have granted token spending permission.
- The signature may authorize an order or permit.
- The site may have disguised the purpose of the signature.
- The wallet may not display readable signing details.
Fix path
What to check first
- Stop interacting with the site immediately.
- Check approvals and revoke suspicious spenders.
- Check recent transactions and token movements.
- Move valuable assets to a clean wallet if risk remains unclear.
- Avoid signing new messages from the same source.
Safety note
Do not make the problem worse
- A signature can be dangerous even if no gas was paid.
- If the seed phrase was entered, create a new wallet immediately.
- Do not rely only on disconnecting the site.