How token approvals work
The ERC-20 standard has an approve function: you sign a transaction that sets how much of a token a contract may spend. The app then moves tokens up to that amount without asking again.[1]
Risks and scams
Wallet drainers trick you into approving a malicious contract, then empty that token. Approvals given to apps that are later hacked are also a risk.[2]
How to stay safe
Approve only the amount you need, read what your wallet shows before signing and revoke old approvals with a revoke tool. Wallets with transaction previews help spot bad approvals.[2]
The Bottom Line
An approval is a standing permission. Keep them small and clean up the ones you no longer use.
Educational content, not financial advice.