Permission for a contract to move your ERC-20 or NFT. Unlimited approvals are a common drain vector.

Wallet previews that estimate asset changes before you sign. Helpful, not perfect.

A second step beyond the password. App or hardware keys beat SMS for exchange security.

A token allowance large enough to let a designated spender move present and potentially future balances without asking for another allowance each time.

A pattern where logic can change via admin keys. Convenient and a central trust assumption.

Assuming a checkmark equals safety. Domains and contract addresses matter more.

A malicious contract or site that requests sweeping approvals and empties tokens and NFTs.

The coordinated response channel when a protocol is under active exploit.

A security researcher who reports or sometimes rescues funds under safe-harbor norms.

Exchange feature that restricts withdrawals to pre-approved addresses.