How can I check and revoke wallet token approvals on Solana? Is there a tool that lists a wallet’s token approvals and lets me revoke them?
Yes. On Solana you can inspect and revoke SPL token approvals (delegates/allowances) using Solana-specific revoker tools. Two commonly used options are the Famous Fox Federation “Revoker” and community-built Solana revoker sites (e.g., Solana Revoker). These tools surface on-chain token/NFT approvals for a connected wallet and provide a one-click “revoke” flow that sends the on-chain revoke transaction.
How it works (practical steps)
-
Open a trusted Revoker tool (for example, the Famous Fox Revoker or a reputable Solana revoker).
-
Connect your Solana wallet (Phantom, Solflare, etc.). The site will read your on-chain token accounts and show current delegates/approvals.
-
Choose the approval(s) you want to remove and click “Revoke” (or “Revoke all”). Your wallet will prompt you to approve a transaction; sign it to submit the on-chain Revoke instruction. The Token Program’s Revoke removes the delegate’s transfer permission for that token account.
Important security and cost notes
-
Revocation is an on-chain transaction: it requires a small SOL fee to pay for the transaction. Expect to pay only a minimal network fee, but you must have enough SOL in the wallet to cover it.
-
“Disconnecting” a site from your wallet UI is not the same as revoking approvals. Disconnect only hides the address from the dApp; approvals remain on-chain until you revoke them.
-
Use only trusted revoke tools and verify URLs before connecting. Review the transaction data in your wallet (the program and instruction) before signing. If anything looks suspicious, do not sign.
If you cannot revoke approvals or funds keep disappearing
If a wallet is being drained immediately when you top it up (a so-called “sweeper bot” exploit), that indicates the private keys or seed phrase are compromised. In that case, revoking approvals may not stop the attacker; the safest action is to move any remaining funds (that are not immediately siphoned) to a brand-new wallet and abandon the compromised one.
Short technical note
On Solana the relevant on-chain operation is the Token Program’s Revoke instruction, which removes the delegate’s transfer authority on a specific token account; only the token account owner can initiate it.