Safety reading
Before Revoking Everything, Identify What Actually Went Wrong
Distinguish a direct transfer, an allowance problem and key exposure before choosing a response.
WALLET BEEP · TOPIC COLLECTION
Understand Wallet Permissions
The basics / Common methods / Practical checks
THE BASICS / COMMON METHODS / PRACTICAL CHECKS
Understand first. Then verify.
Account permissions and token approvals grant different kinds of access. This collection connects permission structures, spending limits and ways to read public evidence. Each article explains its own scope and sources.
A useful place to start
Read “Multisig alone is not a risk verdict”, then use “Tracing the evidence after an unexpected approval” to build a checklist.
Keep following the thread
In publication order
Safety reading
What to Verify on a Hardware Wallet's Clear-Signing Screen
Use the device screen to check action, recipient, asset and amount before authorizing a transaction.
Safety reading
Disconnecting a Dapp Does Not Remove Its Token Allowance
Review browser connections and on-chain allowances separately when retiring an application.
Safety reading
A Gasless Permit Signature Can Still Authorize Token Spending
A signature can become a spending allowance even when the signer pays no immediate gas fee.
Safety reading
Before Scanning a Wallet QR Code, Check What It Asks You to Do
Compare the action after a scan with the transfer or website visit you actually intended.
Safety reading
A Read-Only Checklist for Reviewing TRON Active Permissions
Inspect signer keys, weights, thresholds and allowed operations before considering any permission change.
Safety reading
Case File: Concentric.fi and the Risk of Compromised Upgrade Authority
A 2024 incident illustrates how upgrade control can change the risk behind an existing allowance.
Safety reading
Case File: Fake Revocation Sites After Real Security Incidents
Security incidents can trigger a second wave of phishing disguised as revocation and recovery help.
Safety reading
Case File: When a Transaction Preview Did Not Match Execution
A historical simulation-spoofing report separates a reassuring preview from the eventual on-chain result.