Partnered With:

How to remove the over-authorization of HECO wallet?

Read this article in 7 Minutes

Over-delegating is risky.

According to Blockbeats, on March 4, the BSC official team said that they have noticed the unusual situation in Meerkat Finance and have been in sync with Binance's security team. Audit firms Certified, Peckshield and Certified are investigating and are helping to trace the whereabouts of the stolen assets.

In fact, with lower barriers to entry than IC0, projects of varying quality have begun to appear in the public chain ecosystem of exchanges in recent days, from Hashbridge (HBO) to Book Finance (Book), leaving many investors, lured by high yields, with nothing to lose. For DEFI players, in addition to participating in the audited, relatively low-risk DEFI program, it's important to keep a regular eye on your wallet licensing issues.

There are great security risks in token over-authorization. With previous DApp boom seen similar security events, investors are involved in some project liquidity, mining and easily to the authorized operation of project, an authorized way does simplify the user experience, most users think of their authorized only for a deal, but in many cases, the user is actually granted DeFi project they hold some tokens of permanent access, and unlimited.

If the project party is malicious from the start, an attacker could abuse this authorization to steal all authorized tokens held by the user without the user's consent. Therefore, it's important to check your wallet regularly and clean up projects that are high-risk or have an "unlimited" number of licenses. So, how do you check and cancel the over-authorization of HECO wallets? Rhythmic Blockbeats summarizes the following process:

1. You can access itWeb siteCointool.catxs.com, select the HECO chain from the left menu bar, and then select HECO Credit Inquiry

2. Paste the wallet address you need to query in the query bar, press enter to confirm, and all the contracts authorized by this address will appear below.

Can be found from the above all, have authorized contract risk ratings were, and part of the contract authorization number is shown as "infinite" (high risk), when the user permissions, a contract authorization infinite lines to the project shall have the right to control the account all the assets, such authorization risk is great, a timely recovery of the authorization.

3. If you find a high-risk authorization contract that needs to be unlocked, click "Cancel Authorization" (you need to unlock your wallet first to log in). After confirming your wallet, a prompt of "Cancel Authorization Successfully" will appear.You can de-authorize all high-risk contracts.

It should be noted that cancellation of authorization is an on-chain operation like authorization, which requires payment of Gas charges. In addition, the website has a prompt before the query result: "Please drink coffee at coinool. APP (1.2HT)", which can be unchecked if you don't want to.