{"id":39963,"date":"2023-01-02T02:45:55","date_gmt":"2023-01-02T02:45:55","guid":{"rendered":"http:\/\/egrowonline.com\/?p=39963"},"modified":"2023-01-02T02:45:55","modified_gmt":"2023-01-02T02:45:55","slug":"check-your-smart-contract-approvals","status":"publish","type":"post","link":"http:\/\/egrowonline.com\/?p=39963","title":{"rendered":"Check your smart contract approvals"},"content":{"rendered":"


\n
<\/p>\n

\n

On the back of the worst year for crypto hacks<\/a> and exploits, the crypto community has given some advice to newbie investors going into 2023 \u2014 check your smart contract approvals and revoke access regularly. <\/p>\n

Reddit user 4cademy posted<\/a>\u00a0their advice\u00a0to the r\/CryptoCurrency subreddit on Jan. 1, noting that they had approved a slew of smart contracts over a two-year period and \u201cthought it was time to check my approved smart contracts.\u201d<\/p>\n

They found \u201cnearly all\u201d of their approvals were for \u201cunlimited amounts,” which spurred them\u00a0to revoke approvals for all smart contracts in their wallet as it was \u201cbetter safe than sorry,\u201d and advised:<\/p>\n

\u201cYou should at least check your approvals too and possibly revoke them.\u201d<\/p><\/blockquote>\n

The reason to do this, the user said, is that some users of Decentralized Finance (DeFi) or nonfungible token (NFT) protocols could have mistakenly approved malicious smart contracts from phishing attempts<\/a> that could be lying in wait to steal user funds.<\/p>\n

Such ice phishing scams<\/a> have been successful in the past, with one such elaborate month-long scam involving an offering from a fake film studio leading to\u00a014 Bored Ape Yacht Club<\/a> (BAYC) NFTs stolen from a single wallet.<\/p>\n

Even known \u201cgood-behaving\u201d contracts should be revoked as hackers could find exploits to pilfer funds from connected wallets.<\/p>\n

The 10 largest exploits in 2022<\/a> saw around $2.1 billion stolen mostly from DeFi protocols and cross-chain bridges where attackers found vulnerabilities in existing smart contracts to carry out their heists.<\/p>\n

Related: <\/em><\/strong>Developers need to stop crypto hackers or face regulation in 2023<\/em><\/strong><\/a><\/p>\n

The user offered up further advice saying to \u201cuse different wallets for different purposes\u201d such as having a wallet that only interacts with smart contracts and another that doesn\u2019t which is used for the sole purpose of holding funds.<\/p>\n

Users commenting on the post also suggested that one could schedule a reoccurring interval to revoke all smart contract approvals, such as on the 1st of every month or even at the start of every week.<\/p>\n

Others suggested there were third-party services that could check and revoke smart contract approvals across a number of chains, including Binance Smart Chain (BSC), Ethereum\u00a0and Polygon.\u00a0<\/p>\n

One user responded that the \u201cbest\u201d advice was to interact with as few smart contracts as possible saying \u201crevoking permissions is good practice but not giving permissions in the first place is better.\u201d<\/p>\n<\/div>\n


\n
Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

On the back of the worst year for crypto hacks and exploits, the crypto community has given some advice to newbie investors going into 2023 \u2014 check your smart contract approvals and revoke access regularly. Reddit user 4cademy posted\u00a0their advice\u00a0to the r\/CryptoCurrency subreddit on Jan. 1, noting that they had approved a slew of smart […]<\/p>\n","protected":false},"author":1,"featured_media":39964,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[38],"tags":[3859,2098,185,1242],"class_list":["post-39963","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blockchain","tag-approvals","tag-check","tag-contract","tag-smart"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"http:\/\/egrowonline.com\/wp-content\/uploads\/2023\/01\/1c400455-a24a-45d1-b300-aa2b932b803e.jpg","_links":{"self":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/39963","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=39963"}],"version-history":[{"count":1,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/39963\/revisions"}],"predecessor-version":[{"id":39965,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/39963\/revisions\/39965"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/media\/39964"}],"wp:attachment":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=39963"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=39963"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=39963"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}