Pinned Tweet
You've asked for a multichain dashboard for years.
Today, it's finally here as the centerpiece of our new paid plans: Revoke Premium & Revoke Ultimate!
Premium brings 100+ networks into one dashboard.
And Ultimate adds automated revoking.
Everything you use today stays free.
Today, it's finally here as the centerpiece of our new paid plans: Revoke Premium & Revoke Ultimate!
Premium brings 100+ networks into one dashboard.
And Ultimate adds automated revoking.
Everything you use today stays free.
23
29
166
890,203
Revoke.cash retweeted
Reminder: TOMORROW is Blur shutdown
If you have Blur loans, please repay or transition to @gondixyz (I can connect you if needed)
If you have open smart contract approvals to Blur contracts, REVOKE them with @RevokeCash or other tools
You can avoid getting wrecked. Do it!
If you have Blur loans, please repay or transition to @gondixyz (I can connect you if needed)
If you have open smart contract approvals to Blur contracts, REVOKE them with @RevokeCash or other tools
You can avoid getting wrecked. Do it!
6
9
37
2,271
New chain, new approvals.
Elysium mainnet launched this week, and there are already more than 200,000 token approvals on the chain.
Revoke now supports @Enter_Elysium, so you can see who can spend your tokens and revoke what you no longer use.
Elysium mainnet launched this week, and there are already more than 200,000 token approvals on the chain.
Revoke now supports @Enter_Elysium, so you can see who can spend your tokens and revoke what you no longer use.
3
3
25
3,912
Revoke.cash retweeted
Please revoke your Blur approvals this weekend if you’ve ever sold or listed NFTs there
You can trust scammers will work to exploit their unmaintained contracts to steal your NFTs!
You can trust scammers will work to exploit their unmaintained contracts to steal your NFTs!
We're 5 Days away from Blur getting nuked.
57 Ape loans are spread out in the loan book (low risk)
33 of 86 peng loans are concentrated around 1.8e (medium risk)
but a sleeper higher risk is still looming under the surface that won't reveal itself until the final hours
14
29
142
7,819
Revoke.cash retweeted
We're delighted to share Making Treasury ETH Productive: a data-driven look at the state of ETH treasuries
By @Kairos_Res, in collaboration with @GolemFoundation & @ethereuminsti x.com/i/article/2117…
By @Kairos_Res, in collaboration with @GolemFoundation & @ethereuminsti x.com/i/article/2117…
29
55
234
34,724
Several websites were compromised yesterday, and some of them remain compromised still.
We recommend to not use too many crypto related websites for the time being.
If you already interacted with one of the compromised websites, make sure to check for any unexpected approvals.
And check out the Revoke Sidekick extension in partnership with Fairside that simulates transactions before signing them, which can really make a difference for these kind of hacks.
We recommend to not use too many crypto related websites for the time being.
If you already interacted with one of the compromised websites, make sure to check for any unexpected approvals.
And check out the Revoke Sidekick extension in partnership with Fairside that simulates transactions before signing them, which can really make a difference for these kind of hacks.
⚠️How can you tell a DNS is Hijacked when you visit an official website?..⚠️
At least 12+ domains got hijacked last night, serving wallet drainer code on their official website.. All but 5 have now moved their DNS to Vercel/Cloudflare to mitigate and those 5 are still IT!
The URL can be 100% correct, but the website you're visiting can still be malicious.
This compromise did not break anything from the teams flow, setup, compromise anything they did, it appears someone inside name(.)com (The registrar) change the nameservers to the domains. If you use them as a registrar I would consider moving away and at minimum setup cloudflare for hosting/filtering.
If you are a user, there really isn't a way to detect this unless you are checking WhoIs, DNS updates, ASN numbers, and many more which most don't. The only way to tell is that when you go to the website it will ask for your seed phrase/private key, or prompt you to sign an odd transaction. The transaction part is tough to spot which is why I recommend always using @RevokeCash extension to help spot this for you with the transaction simulator...
If you are a business and not using cloudflare, let's talk, this is basic proper security on domains outside of domain lock, etc. You have to be prepared ahead of time to prevent/mitigate this in an instance moment!
Stay Safe & Stay Vigilant
13
77
253
30,042
Revoke.cash retweeted
⚠️How can you tell a DNS is Hijacked when you visit an official website?..⚠️
At least 12+ domains got hijacked last night, serving wallet drainer code on their official website.. All but 5 have now moved their DNS to Vercel/Cloudflare to mitigate and those 5 are still IT!
The URL can be 100% correct, but the website you're visiting can still be malicious.
This compromise did not break anything from the teams flow, setup, compromise anything they did, it appears someone inside name(.)com (The registrar) change the nameservers to the domains. If you use them as a registrar I would consider moving away and at minimum setup cloudflare for hosting/filtering.
If you are a user, there really isn't a way to detect this unless you are checking WhoIs, DNS updates, ASN numbers, and many more which most don't. The only way to tell is that when you go to the website it will ask for your seed phrase/private key, or prompt you to sign an odd transaction. The transaction part is tough to spot which is why I recommend always using @RevokeCash extension to help spot this for you with the transaction simulator...
If you are a business and not using cloudflare, let's talk, this is basic proper security on domains outside of domain lock, etc. You have to be prepared ahead of time to prevent/mitigate this in an instance moment!
Stay Safe & Stay Vigilant
At least 12+ domains got hijacked last night, serving wallet drainer code on their official website.. All but 5 have now moved their DNS to Vercel/Cloudflare to mitigate and those 5 are still IT!
The URL can be 100% correct, but the website you're visiting can still be malicious.
This compromise did not break anything from the teams flow, setup, compromise anything they did, it appears someone inside name(.)com (The registrar) change the nameservers to the domains. If you use them as a registrar I would consider moving away and at minimum setup cloudflare for hosting/filtering.
If you are a user, there really isn't a way to detect this unless you are checking WhoIs, DNS updates, ASN numbers, and many more which most don't. The only way to tell is that when you go to the website it will ask for your seed phrase/private key, or prompt you to sign an odd transaction. The transaction part is tough to spot which is why I recommend always using @RevokeCash extension to help spot this for you with the transaction simulator...
If you are a business and not using cloudflare, let's talk, this is basic proper security on domains outside of domain lock, etc. You have to be prepared ahead of time to prevent/mitigate this in an instance moment!
Stay Safe & Stay Vigilant
27
49
190
38,457
Binance was hacked today. This appears to be the biggest hack crypto has ever seen.
Since this concerns a centralized exchange, there is no need to revoke anything specifically, but we urge users to be careful regardless.
Binance has said they will cover any lost user funds.
Since this concerns a centralized exchange, there is no need to revoke anything specifically, but we urge users to be careful regardless.
Binance has said they will cover any lost user funds.
We are working non-stop to resolve this issue. Binance will cover all losses.
As a precaution, all deposits and withdrawals are temporarily suspended while our team conducts security checks, freezes funds, and works with law enforcement.
We are working around the clock and will m once the investigation is complete. Please rely only on official Binance channels for updates.
This is an industry-wide effort, and we are grateful to partners across the ecosystem who have moved quickly to help freeze affected assets.
We will continue to share verified updates through official Binance channels. User funds are safe.
1
2
21
3,246
Revoke.cash retweeted
Polymarket @Polymarket UI seems to be compromised!
Either a DNS or BGP attack it looks like.
If you signed anything on it - go to @RevokeCash and revoke approvals!
Either a DNS or BGP attack it looks like.
If you signed anything on it - go to @RevokeCash and revoke approvals!
5
38
145
22,445
Blur is sunsetting. Your approvals aren't.
The Blur app shuts down Nov 12 and Blend stops new loans. NFT approvals to their contracts stay active until you revoke them.
Done with Blur? Clean up at revoke.cash. We now flag all Blur and Blend contracts as deprecated.
The Blur app shuts down Nov 12 and Blend stops new loans. NFT approvals to their contracts stay active until you revoke them.
Done with Blur? Clean up at revoke.cash. We now flag all Blur and Blend contracts as deprecated.
11
76
225
17,468
Revoke.cash retweeted
As with other deprecated NFT marketplaces, you should revoke all open approvals to Blur and its products no later than November 12th.
Deprecated protocols receive little to no security support and auditing and hackers know it
Use @RevokeCash to clean up active approvals
Deprecated protocols receive little to no security support and auditing and hackers know it
Use @RevokeCash to clean up active approvals
7
26
129
8,622
Revoke.cash retweeted
Last month, the contracts powering Magic Eden were exploited to the tune of millions of dollars. I was lucky enough to be in a position to rescue a good portion of that, but it highlighted the danger of leaving approvals open as adversaries get access to better and better tools for finding holes in contract logic.
Today, Blur announced that they will be deprecating their frontend.
I've investigated Blur and found no exploits within the current contracts. However, the Blur contracts are upgradable, meaning that they could turn malicious at any time.
They currently have eight figures worth of NFTs approved to them. The safety of those NFTs effectively hinges on the opssec of the Blur team, which appears to be disbanding at this time.
If you have open approvals to Blur, I recommend you remove them immediately. Use revoke.cash or similar to ensure that you are protected in case of a contract exploit or later upgrade.
Don't wait. The time is now.
Today, Blur announced that they will be deprecating their frontend.
I've investigated Blur and found no exploits within the current contracts. However, the Blur contracts are upgradable, meaning that they could turn malicious at any time.
They currently have eight figures worth of NFTs approved to them. The safety of those NFTs effectively hinges on the opssec of the Blur team, which appears to be disbanding at this time.
If you have open approvals to Blur, I recommend you remove them immediately. Use revoke.cash or similar to ensure that you are protected in case of a contract exploit or later upgrade.
Don't wait. The time is now.
89
358
1,320
140,768
Superboard just added a quest to help users learn about revoking token approvals.
If you want to explore web3 and security through fun quests, check out the Revoke quest below 👇
If you want to explore web3 and security through fun quests, check out the Revoke quest below 👇
Meet @RevokeCash, a tool to check and revoke token approvals.
See what you’ve approved, clean up old permissions, and keep your wallet safer.
Join → superboard.xyz/quests/explore…
5
2
22
4,169
Revoke.cash retweeted
PSA for new Revoke Ultimate subscribers 🛡️
After last week's Magic Eden exploit, we've seen quite a few new Ultimate subscribers.
Thank you for the trust! Please take 2 minutes to check your setup. Auto-Revoking can only protect a wallet when both of these are true:
1. You missions for that wallet in MetaMask
2. Your wallet is a MetaMask smart account on that network
Step 2 usually happens automatically during step 1. But the upgrade can fail (e.g. if you've already upgraded to a smart account with another wallet).
How to check:
→ Go to revoke.cash/account
→ Open the Auto-Revoking section
→ Look for a yellow warning banner or a ⚠️ icon next to a network. Each one marks a network where you are NOT protected yet.
How to fix it:
→ Switch the account to a smart account in MetaMask
→ If a different wallet app already upgraded your address, switch it back to a regular account in that app first. Then upgrade it in MetaMask.
Also check that every network you use is toggled on, and that each wallet in your subscription granted its own permissions.
If something is unclear, our DMs and Discord are open 🙏
After last week's Magic Eden exploit, we've seen quite a few new Ultimate subscribers.
Thank you for the trust! Please take 2 minutes to check your setup. Auto-Revoking can only protect a wallet when both of these are true:
1. You missions for that wallet in MetaMask
2. Your wallet is a MetaMask smart account on that network
Step 2 usually happens automatically during step 1. But the upgrade can fail (e.g. if you've already upgraded to a smart account with another wallet).
How to check:
→ Go to revoke.cash/account
→ Open the Auto-Revoking section
→ Look for a yellow warning banner or a ⚠️ icon next to a network. Each one marks a network where you are NOT protected yet.
How to fix it:
→ Switch the account to a smart account in MetaMask
→ If a different wallet app already upgraded your address, switch it back to a regular account in that app first. Then upgrade it in MetaMask.
Also check that every network you use is toggled on, and that each wallet in your subscription granted its own permissions.
If something is unclear, our DMs and Discord are open 🙏
13
8
47
6,708
Revoke.cash retweeted
Beware of lowlife losers trying to further exploit victims by piggybacking the recent exploit to lure people onto piggyback phishing sites.
Use revoke.cash to revoke approvals, anything else somebody sends you is probably a scam.
Use revoke.cash to revoke approvals, anything else somebody sends you is probably a scam.
36
42
267
16,904
Revoke.cash retweeted
#ALERT 🚨 scammers are in the DMs of limitbreak exploit victims pushing a website “signature(.)site” to revoke permissions on their wallet. DO NOT use this website for obvious reasons.
Use @RevokeCash to revoke ANY AND ALL permissions safely. Stay vigilant.
#cybersecurity
Use @RevokeCash to revoke ANY AND ALL permissions safely. Stay vigilant.
#cybersecurity
2
8
29
2,656
PSA for new Revoke Ultimate subscribers 🛡️
After last week's Magic Eden exploit, we've seen quite a few new Ultimate subscribers.
Thank you for the trust! Please take 2 minutes to check your setup. Auto-Revoking can only protect a wallet when both of these are true:
1. You missions for that wallet in MetaMask
2. Your wallet is a MetaMask smart account on that network
Step 2 usually happens automatically during step 1. But the upgrade can fail (e.g. if you've already upgraded to a smart account with another wallet).
How to check:
→ Go to revoke.cash/account
→ Open the Auto-Revoking section
→ Look for a yellow warning banner or a ⚠️ icon next to a network. Each one marks a network where you are NOT protected yet.
How to fix it:
→ Switch the account to a smart account in MetaMask
→ If a different wallet app already upgraded your address, switch it back to a regular account in that app first. Then upgrade it in MetaMask.
Also check that every network you use is toggled on, and that each wallet in your subscription granted its own permissions.
If something is unclear, our DMs and Discord are open 🙏
After last week's Magic Eden exploit, we've seen quite a few new Ultimate subscribers.
Thank you for the trust! Please take 2 minutes to check your setup. Auto-Revoking can only protect a wallet when both of these are true:
1. You missions for that wallet in MetaMask
2. Your wallet is a MetaMask smart account on that network
Step 2 usually happens automatically during step 1. But the upgrade can fail (e.g. if you've already upgraded to a smart account with another wallet).
How to check:
→ Go to revoke.cash/account
→ Open the Auto-Revoking section
→ Look for a yellow warning banner or a ⚠️ icon next to a network. Each one marks a network where you are NOT protected yet.
How to fix it:
→ Switch the account to a smart account in MetaMask
→ If a different wallet app already upgraded your address, switch it back to a regular account in that app first. Then upgrade it in MetaMask.
Also check that every network you use is toggled on, and that each wallet in your subscription granted its own permissions.
If something is unclear, our DMs and Discord are open 🙏
13
8
47
6,708
Revoke.cash retweeted
REVOKE YOUR APPROVALS
Even if you were not affected on 9/25, you could still be at risk.
PPV2 exploit is still ongoing. Just an hour ago, 0x3B13...3327 lost 0.15246 WETH just one block after receiving it after accepting an offer.
The exploiter tipped 99% of it to Titan Builder H, so there's no way to even reasonably frontrun these to rescue funds.
Keep spreading the word.
Even if you were not affected on 9/25, you could still be at risk.
PPV2 exploit is still ongoing. Just an hour ago, 0x3B13...3327 lost 0.15246 WETH just one block after receiving it after accepting an offer.
The exploiter tipped 99% of it to Titan Builder H, so there's no way to even reasonably frontrun these to rescue funds.
Keep spreading the word.
67
286
912
108,687
Last year we partnered with @pudgypenguins to create a SBT to reward proper wallet security practices. Initially this SBT was only accessible to Pudgy Penguins holders, but today we are opening it up to EVERYONE!
25
53
341
25,725
To claim it, you need to enter a cold wallet address with no token approvals. Here's how to claim it:
1. Visit revoke.cash/cold-storage-s…
2. Enter your eligible wallet address
3. Pass the security quiz
4. The SBT will be sent to your wallet
No wallet connection needed!
1. Visit revoke.cash/cold-storage-s…
2. Enter your eligible wallet address
3. Pass the security quiz
4. The SBT will be sent to your wallet
No wallet connection needed!
13
6
52
4,626