Manage your token approvals and protect yourself from scams on 100+ networks. Founded by @RoscoKalis.
Amsterdam, The Netherlands
Joined February 2022
- Tweets3.4K
- Following55
- Followers85K
- Likes15.3K
Pinned Tweet
You've asked for a multichain dashboard for years.
Today, it's finally here as the centerpiece of our new paid plans: Revoke Premium & Revoke Ultimate!
Premium brings 100+ networks into one dashboard.
And Ultimate adds automated revoking.
Everything you use today stays free.
This year we've started monetisation, but at heart we are still a public good, working hard to prevent losses.
If you want to support us on that mission, please subscribe to our new paid plans, use our paid batch revoke functionality, or donate directly to revoke.eth 🫡
Wallets that revoked their Magic Eden / Limit Break Payment Processor approvals before the attack kept $3.9M in NFTs and tokens safe, including 70 Bored Apes and 220 WETH.
Make sure to check if you're safe: revoke.cash/exploits/magic-e…
Wallets that revoked their Magic Eden / Limit Break Payment Processor approvals before the attack kept $3.9M in NFTs and tokens safe, including 70 Bored Apes and 220 WETH.
Make sure to check if you're safe: revoke.cash/exploits/magic-e…
This data was gathered using the exploit stats scripts in our open source github repository and can be verified independently: github.com/RevokeCash/revoke…
With today's Limit Break / Magic Eden exploit, we've had several users request support for Glyph. In this time it's important that *everyone* can revoke approvals, so we've quickly added Glyph as a supported option. 🫡
Revoke.cash retweeted
Magic Eden shut down their EVM marketplace yesterday.
But approvals don't disappear when platforms do.
Your NFTs and tokens are one compromised contract away from being drained.
So we added a Magic Eden label on Revoke.cash - to find and revoke them in seconds.
Revoke.cash retweeted
We are sharing an interim update regarding an exploit identified with @limitbreak Payment Processor V2, a NFT trading protocol maintained by the company Limit Break and which Magic Eden adopted to settle trades on EVM in 2024.
Magic Eden stopped using Payment Processor V2 in Oct 2024 and ceased our EVM marketplace altogether in Q1 2026. No live Magic Eden listings were impacted in this exploit. We will provide more updates as we investigate the impact further.
We are also contacting Limit Break as they are the owner & maintainer of the protocol to see what other mitigations can be done, including progress on pausing transfers on the protocol. Thank you to @0xQuit for the whitehat rescue and for bringing this to our collective attention: nitter.cf/0xQuit/status/21034106…
Why are ME listings being shown to be involved?
NFTs listed on ME EVM from approx Feb 2024 to Oct 2024 could be impacted by this issue with the Limit Break Payment Processor v2 contract. Any listings on ME EVM after Oct 2024 should not be impacted here. We are still further refining our investigation and will provide more updates here.
In the meantime, if you listed or traded NFTs on Magic Eden’s EVM marketplace before we shut it down, revoke this contract:
Limit Break: Payment Processor (V2)
0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834
Go through our instructions here: revoke.cash
Ethereum → filter that address → revoke every NFT “approved for all” row
Repeat for the following chainsPolygon
Base
See also 0xQuit’s tweet on revocation for further reference also: nitter.cf/0xQuit/status/21034106…
NOTE: Revoking does not return tokens that already moved.
Again, we will keep the community updated as we investigate further.
Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834
Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366
use revoke.cash or similar.
Revoke.cash retweeted
Magic Eden got hacked for 4,000 EVM NFTs
And someone saw it coming:
- March: ME shuts down EVM marketplace
- Revoke cash warns about approvals
- September: 4,000 NFTs get stolen
Magic Eden shut down their EVM marketplace yesterday.
But approvals don't disappear when platforms do.
Your NFTs and tokens are one compromised contract away from being drained.
So we added a Magic Eden label on Revoke.cash - to find and revoke them in seconds.
🚨 Limit Break Exploited 🚨
Ever traded NFTs on Magic Eden's Ethereum marketplace? Your wallet probably still approves Limit Break's Payment Processor, which now has a known vulnerability.
Check if you're exposed and revoke:
revoke.cash/exploits/magic-e…
This exploit was whitehat-hacked by @0xQuit so it appears that your NFTs are safe. Make sure to revoke all affected approvals so you're safe going forward as well!
nitter.cf/0xQuit/status/21033965…
REVOKE APPROVALS TO THESE ASAP:
Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834
Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366
use revoke.cash or similar.
REVOKE APPROVALS TO THESE ASAP:
Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834
Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366
use revoke.cash or similar.
🎉 Arc Support 🎉
@arc, Circle's new Layer 1 with USDC as native gas, went live today. Revoke.cash supports it from day one. 🫡
Check and revoke your token approvals on Arc:
revoke.cash/token-approval-c…
We're proud to join the new Encrypt the Mempool Coalition!
Alongside industry leaders, we're pushing to integrate an EIP to encrypt the mempool in Ethereum's I* Hardfork - to stop toxic MEV & real-time censorship in a decentralized & credibly neutral way.
Join the coalition 👇
Help make Ethereum private and credibly neutral - a place where normies, degens, institutions (& everyone else) can transact without toxic MEV & real-time censorship.
encryptedmempool.org/
This week, we've added support for .gwei and .wei domains.
These domain name systems have been gaining popularity recently, and now you can easily search for your .gwei / .wei domains in the Revoke search bar! 🫡
After you've signed a malicious approval, revoking cannot recover your stolen money.
But it's incredibly important that you still revoke the access that you gave, otherwise they can keep stealing more in the future, like in the case below.
Stay safe, revoke your approvals 🫡
🚨 GoPlus Security Alert
A user signed a malicious #Permit tx 922 days ago, then got drained for ~97k $SYN. Never revoked the allowance. Phisher came back and hit them again — another ~$122k in $SYN gone.
Victim: 0x686618aBb3730079601a5abEAD6eC24549c5Ce34
Phish wallets: 0x0000db5c8B030ae20308ac975898E09741e70000 0x9EC9ca0c7846E8726D5d734EFd291f855ea03447
🛡 Security Tips:
1. Follow the #GoPlus Anti-Phishing “4 Don’ts”:
🚫 Don’t click unknown links
🚫 Don’t install unverified software
🚫 Don’t sign transactions you don’t fully understand
🚫 Don’t send funds to unverified addresses
2. Install the GoPlus Security extension to block phishing links, risky signatures, malicious approvals, and suspicious transactions in real time 👉 chromewebstore.google.com/se…
3. Approve only what you need. Never infinite allowance. Revoke stale approvals on a schedule.
This week we submitted a proposal to bring Revoke to TRON through the @trondao Builders League grant program.
TRON is home to $90B+ in USDT and millions of daily users, but they've never been able to use Revoke. We want to bring TRON users the same approval security tooling we provide across 100+ other networks.
If you'd find this valuable, let us know 👇
Full proposal on the TRON DAO forum:
forum.trondao.org/t/grant-ap…
The past 2+ years @wiimee has been a super valuable part of the Revoke team, managing socials, educational content, and more.
Due to market conditions, we have come to the point where we cannot retain him, but he'd be a great addition to any web3 team hiring right now!
Some great chapters end without you being ready for the next one.
This week marks my last with @RevokeCash.
I'm incredibly grateful to @RoscoKalis for giving me the opportunity to work with Revoke for 2+ years. I learned a ton, enjoyed the work and got to contribute to a mission I deeply care about.
Looking back, he opened the door that allowed me to go full-time in crypto in the first place.
So what's next?
I really don't know. For the first time since 2022, I'm without a gig in the space.
Let's see where life takes me from here.
Data leaks make phishing personal.
If an attacker already knows your name, phone number, address and that you bought a hardware wallet, their message will look a lot more convincing.
If you're affected by the Trezor breach, treat unexpected support messages, calls and letters and home visits with extra suspicion.
Never share your recovery phrase with anyone. Stay safe!
We have some difficult news to share. Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data. This affects new customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order within the 90 days prior to August 8th, 2026.
The data exposed:
- Full names
- Shipping addresses
- Phone numbers
- Email addresses
The incident affects 11,742 customers with full exposure (name, email, phone number, shipping address) and 1,947 customers with partial exposure (name, city, email). The breach is limited due to Trezor’s strict 90-day data storage policy (we were also able to negotiate the same terms with fulfillment partners, who follow the same policy).
All affected customers have been contacted separately by email.
Our systems and devices remain secure, but affected customers could experience an increase in phishing attempts.
NEVER enter your wallet backup on a website or share it with anyone, and only check for updates on official Trezor channels.
We are deeply sorry to the community and those affected.
We are investigating this situation and will post updates on our blog:
trezor.io/blog/news/recent-c…
The more chains and wallets you use, the harder it gets to answer: Who can still move my tokens?
Old approvals don't disappear because you stopped using that protocol. When one of those approvals gets used later, the transfer might look like it came out of nowhere.
Approval execution history lets you trace it back to the exact spender.
