Definition ∞ A token approval drain is a malicious exploit where an attacker gains unauthorized permission to spend a user’s tokens from their wallet. This typically occurs when a user has granted an unlimited or excessively broad token approval to a compromised smart contract or a phishing website. The attacker then uses this approval to transfer the approved tokens out of the victim’s wallet without their explicit transaction signature. It represents a direct loss of digital assets.
Context ∞ News reports frequently detail instances of token approval drains, often resulting from phishing scams or vulnerabilities in decentralized applications. These incidents highlight the critical importance of carefully reviewing token approval requests and regularly revoking unnecessary permissions. Users are advised to exercise extreme caution when interacting with new or unfamiliar smart contracts to prevent such financial losses.
Blockchain Knowledge
Cryptocurrency Foundation
Cryptospace Newsfeed
