Revoke.cash Describes Automatic Revocation Through Scoped Permissions

Automatic revocation uses delegated authority. Here is what the published design does and does not cover.

Revoke.cash Describes Automatic Revocation Through Scoped Permissions — editorial illustration
Editorial illustration, not evidence of an incident.

The product report

A MetaMask case study published on 27 August 2026 describes Revoke.cash Auto-Revoking. Instead of asking the user to sign each removal of an approval, the service uses an explicitly granted permission to perform revocations. The report describes separate operational accounts for routine and urgent revocation.

The important boundary

The design uses scoped permissions associated with ERC-7715. Revocation authority is different from general authority to transfer funds, but it is still authority that a user grants. The case study is a product account of the implementation, not an independent security audit or a statement that delegation has no risks.

Questions before enabling automation

Review which account receives authority, which operations it may perform, how long it lasts and how to cancel it. Keep a record of that consent separately from your list of token allowances. Automatic revocation may reduce the time an unnecessary allowance remains available; it cannot make an already completed transfer disappear. Readers should also distinguish this EVM implementation from TRON account permissions. A feature name shared across wallets does not imply identical authorization rules.

Source and review date

MetaMask — original source. Source published: 2026-08-27. Source checked: 2026-10-23.

This is an original Wallet Beep editorial summary. Consult the linked source for its full context and any later updates.

RELATED READING

Found an error in the facts or sources? Send a correction →