Every dApp you used
may still drain your wallet.
That swap you made months ago? The contract can probably still spend your tokens — unlimited and forever. WalletWatch shows every one of those permissions in plain English, and flags the ones that can hurt you.
- No private key. Ever.
- Reads public on-chain data only
- 6 chains, no wallet connection
The silent risk
Approvals don't expire. Exploits don't warn you.
Every swap, mint, or DeFi interaction grants a contract permission to move your tokens — usually unlimited. It stays active after you're done using the dApp. If that contract is ever exploited, drained funds need zero extra signatures from you — the permission is already in place.
Wallet drainers cost users over $550M in the last two years. Most victims never knew the permission existed.
0x…983c approved to spend UNLIMITED
0x…441bc can spend 1,234.5 USDC
0x…564 limited to a fixed amount
Find your risk in three steps
Paste an address
Ethereum, Base, Arbitrum, Polygon, BNB Smart Chain or Solana. No wallet connection, no account, no cost.
We map the permissions
Every token approval and SPL delegate the wallet has granted — read live from public on-chain data.
We flag what can hurt you
Unlimited limits, unverified contracts, stale approvals — each labelled Critical or Warning, in plain English.
The scan tells you today. Pro watches tomorrow.
A scan is a snapshot. New approvals appear every time you interact with a new dApp. Pro re-checks your wallets every 4 hours and pings you on Telegram the moment a dangerous one appears — with a one-tap revoke button right in the alert.
Up to 5 wallets · email alerts too · cancel anytime
See what your wallet is allowing
Your key never leaves your wallet. We can't access your funds.