Revoke.cash logo

How Auto-Revoking Works

Everything you should know about Auto-Revoking before you subscribe: how it protects you, what it needs, and where its limits are.

From setup to protection

1

Grant a revoke-only permission

Connect with MetaMask and grant Revoke.cash an ERC-7715 permission that can only be used to revoke approvals. It cannot transfer funds, sign messages, or do anything else, and you can withdraw it at any time.

2

Set your rules

Choose what should be revoked automatically: approvals to exploited or risky spenders, approvals older than your staleness threshold, or both. Every wallet on your subscription can tune its own rules.

3

We keep watch

Revoke.cash continuously monitors your approvals across all supported networks and checks them against your rules and our exploit database, around the clock.

4

Dangerous approvals get revoked

When an approval matches your rules, a revoke transaction is sent on your behalf and appears in your activity log. Exploit-triggered revokes are treated with higher urgency.

Supported wallets & networks

Auto-Revoking currently requires MetaMask, the first wallet to support ERC-7715 permissions. Support for more wallets and networks will follow as the standard gets adopted. It currently works on 11 networks:

EthereumEthereum
BNB ChainBNB Chain
PolygonPolygon
BaseBase
ArbitrumArbitrum
OptimismOptimism
MonadMonad
LineaLinea
Gnosis ChainGnosis Chain
UnichainUnichain
Ethereum SepoliaEthereum Sepolia

Gas fees are included

Your subscription includes a $5 monthly gas allowance that pays for automated revoke transactions. When the allowance is used up, remaining revokes wait for the next monthly cycle, with exploit-triggered revokes still prioritized. To spend your allowance efficiently, individual revokes are capped at $2 and may be deferred temporarily during gas spikes.

What Auto-Revoking is not

Auto-Revoking is best-effort protection: it meaningfully reduces your risk, but it cannot guarantee that losses are prevented. Detection can lag since an exploit must be identified before it can trigger a revoke, and an attacker may act first. On-chain execution depends on conditions outside anyone's control, such as network congestion and gas prices. See our Terms and Conditions for details.

Ready for set-and-forget protection?

View plans