A signature costs no gas: can it still authorize token movement?
An offchain signature can authorize later token movement even when signing itself has no network fee.
The reference
All swap guides
Browse 484 guides to DEX aggregation, BNB Chain, swap execution and integration.
A swap site asks for a recovery phrase: stop the interaction
A DEX or aggregator does not need the recovery phrase that controls your wallet; identify the request as a secret-exposure risk.
Address poisoning around swaps: why history is a poor address book
Avoid copying lookalike recipient addresses planted in transaction history around wallet activity.
An aggregator reports a security incident: what should users check?
Review the exact affected contracts, time window and permissions after an aggregator announces a security incident.
Can a honeypot checker prove a token is sellable?
Treat token scanner results as scoped evidence, including unknown states, rather than a guarantee of future sellability.
Can an old approval spend tokens I receive later?
Understand why an old remaining allowance can matter again after more of the same token arrives in an account.
Can anyone reverse a confirmed swap or recover stolen tokens?
Understand why confirmed swaps are not normally reversible and which destination-dependent recovery paths may exist.
Can I revoke a permit signature that has not been used?
Unused permit signatures require scheme-specific invalidation; clearing a visible allowance may not permanently cancel the signature.
Can switching RPCs expose a previously private swap?
A pending private transaction can lose its intended propagation protection if a wallet rebroadcasts it through a public endpoint.
Check the wallet installation source before connecting to a DEX
Check wallet installation provenance before entrusting an extension with signing access or recovery material.
Clear signing helps, but which swap facts still need checking?
Use readable transaction review to verify intent while recognizing that it does not audit the underlying protocol.
Do I need to revoke the same token approval on every chain?
Token permissions are chain-local; clearing an allowance on one chain does not automatically clear similar permissions elsewhere.
Does a one-time Permit2 signature leave a standing allowance?
A consumed SignatureTransfer authorization does not create a recurring spender allowance, but the token approval to Permit2 can remain.
Does a successful small sell prove a token is safe?
A successful small token sale is evidence for that transaction, not a guarantee that a later larger exit will work.
Does an approval remain active after the swap fails?
A separately confirmed approval can remain active when a later swap reverts or never submits.
Does connecting a wallet expose my tokens or just my address?
Distinguish ordinary account connection from token approval, signing and broader delegated permissions.
Does disconnecting a wallet revoke its token approvals?
Disconnecting ends an application session, while token approvals remain in the token contract until changed or otherwise exhausted.
Exact amount or unlimited approval: what changes your exposure?
Compare the permission exposure of a narrowly sized allowance with a reusable unlimited approval.
Gas disappears immediately after funding a wallet: suspect a sweeper
Recognize immediate outgoing gas transfers as possible key compromise and avoid repeatedly funding an account controlled by a sweeper.
How to read an audit claim before using an aggregator
Read the audit’s scope, version, findings and deployment relevance before treating an aggregator’s audit badge as security evidence.
How to reduce sandwich exposure when swapping
Reduce sandwich exposure by reviewing execution bounds, route liquidity and the actual coverage of private submission.
How to revoke an unused swap allowance safely
Remove an unwanted standard token allowance and verify the onchain result without confusing revocation with recovery.
How to verify an aggregator website without trusting a search ad
Verify the real application domain and contract request when search ads or copied swap interfaces look convincing.
How to verify the spender before approving an aggregator
Verify the exact contract receiving token permission, rather than confusing it with the token or execution router.
I signed an unknown swap request: what should I check first?
Triage an unfamiliar signed request by identifying whether it exposed a key, granted permission or authorized an order.
Locked liquidity does not settle every token safety question
Check the scope and duration of a liquidity lock without assuming it removes token or execution risk.
Ownership renounced: what token risks remain?
Understand which authority a renounceOwnership transaction removes and which independent risks may remain.
Pasted recipient changed: how to stop a misdirected swap
Stop and investigate when a pasted swap recipient differs from the address you intended to use.
Permit signature versus token approval: which permission are you granting?
Compare a standard onchain token approval with an ERC-2612 signed permit and understand what each authorizes.
Permit2 has two permission layers: what should you review?
Separate the token allowance granted to Permit2 from the spender authorization Permit2 checks for an application.
