Chapter 11

Approvals and Signing

Connecting a wallet to a dApp usually only shares your public address. Approvals and signatures are where real authority begins — a token approval lets a contract spend your assets up to a limit you set.

Modern wallets show transaction previews that decode what a signature will do. Blind signing — approving unread hex on a hardware device — remains one of the most dangerous habits in DeFi.

Treat unlimited approvals as a last resort. Prefer exact amounts for one-time actions, and read every prompt as carefully as you would read a wire transfer confirmation at a bank.