Tunakagua uwezo wa kivinjari kusoma kwa sauti…
Somo hili linapatikana kwa Kiingereza kwa sasa. Kiolesura kinatumia lugha uliyochagua.
Soma asili ya Kiingereza →The dangerous word can be Approve
Distinguish wallet connection, token approval and signature permissions, including what disconnecting does not undo.
A wallet drainer does not always ask for your recovery phrase. Sometimes it asks you to authorize the theft yourself.
- Connect: share an interface connection
- Approve or permit: grant specific authority
- Disconnect: end the connection
- Revoke: cancel the relevant allowance
An allowance is spending authority
For an EVM token approval, inspect the token, spender and amount. An unlimited allowance can expose more than the size of the trade you intended. Ask why this particular spender needs the permission. Merely connecting a wallet is different from granting an on-chain allowance; read each subsequent prompt as a new request.
No immediate fee does not mean no effect
A signature can grant authority that is used later. Permit-style signatures are one example: a malicious request may authorize token spending while looking like a simple message. Read the spender, token, limit, deadline and domain details where displayed. Reject a request you cannot interpret; do not assume every signature is only a harmless login.
Closing the tab is not revocation
Disconnecting an application removes its connection to the wallet interface. It does not cancel an existing token allowance on-chain. Use the correct network's official approval guidance to inspect and revoke permissions you no longer trust. Revocation may require a network fee and does not reverse transfers that already happened.
Translate the imaginary permission slip
A fictional game asks to spend unlimited SAMPLE savings tokens to reveal a free badge. No wallet interaction is required.
- Write the intended action: reveal a badge.
- Write the requested authority: spend the savings token without that small action's limit.
- Compare the two. Mark the mismatch and practice choosing Reject.
- Write the follow-up question: which permissions would remain if I only disconnected?
The size and purpose of a permission should make sense before it is granted.
Read what the signature allows, not just what the page calls it.
Maendeleo yanahifadhiwa kwenye kifaa hiki.