Chapter 11
Approvals and Signing
Connecting a wallet to a dApp usually only shares your public address. Approvals and signatures are where real authority begins — a token approval lets a contract spend your assets up to a limit you set.
Modern wallets show transaction previews that decode what a signature will do. Blind signing — approving unread hex on a hardware device — remains one of the most dangerous habits in DeFi.
Treat unlimited approvals as a last resort. Prefer exact amounts for one-time actions, and read every prompt as carefully as you would read a wire transfer confirmation at a bank.