OSWOpSecWallet
Wallet security research from public data and official disclosures. We never ask for seed phrases, private keys or transfers.

Contract Approvals

Articles tagged Contract Approvals

2026-09-21How a Wallet App's Signing Flaw Emptied 1,552 XRP Ledger WalletsBetween 16:29 and 18:34 UTC on September 15, an automated drain emptied 1,552 XRP Ledger wallets holding 2,009,321 XRP. The flaw was in a phone app's signing path, and the company's own exposure criteria describe a class of user rather than a class of transaction. This deep dive reconstructs the two-wave timeline, explains why the recovery phrase rather than the device sets the blast radius, profiles who was actually exposed, and reads the week's three other failures against the same boundary.2026-08-28How to Check and Revoke Token Approvals on TRON: A Step-by-Step GuideA step-by-step guide to checking and revoking token approvals on TRON: what an approval is, how drainers abuse it, how to review authorizations in TronLink and verify contracts on TRONSCAN, and the habits that keep a TRC-20 USDT wallet clean.2026-08-28Five Tools for Checking Address Risk and Revoking Approvals — and Their LimitsFive vetted tool categories for wallet safety — block explorers, in-wallet authorization managers, poisoning-aware wallets, approval revokers and hardware wallets — with what each does well, what it cannot do, and how to verify you are using the real one.