Alert when a wallet lets a new address spend its tokens
A phishing signature may not move funds at all, but give the attacker the right to spend them. The drain then comes later, through transferFrom. SmartAlert spots the allowance, checks the spender against the wallet's last 90 days of history, and tells you if the address is new or the allowance is unlimited.
The rule
This is how the rule looks in the new-alert form. You enter the contract address when you create it.
Rule
from contract events- Watches
- Up to 100 wallets from Addresses in one rule
- Fires
- Allowance to a new address: always; unlimited allowance to a known address: optional. Types: ERC-20
approve, collectionApprovalForAll, Permit2 - Severity
- Critical: unlimited or whole collection to a new address; Warning: everything else
- Speed
- After the network confirms the block, checked every 12 seconds
- Networks
- Ethereum, BNB Chain, Base, Arbitrum
- Plan
- Pro and above; "New address only": Business
Where it would have fired
Every rule can be checked on history before you turn it on: you see where it would have fired over the last days.
Where the alert goes
Telegram on every plan; Slack, Discord and webhook on paid plans. A new project gets Pro limits for 14 days, no card needed.
- TelegramFree
- SlackPro
- DiscordPro
- WebhookPro
Works on: Ethereum, BNB Chain, Base, Arbitrum. · Free plan: up to 3 rules.
How to enable
- 1
Add the wallets under Addresses.
- 2
Create a "Wallet approvals" rule, tick the wallets and allowance types.
- 3
Pick a channel.
Why it matters
An unlimited allowance to a new address is what a phishing signature leaves behind. Until it is revoked, the token can be drained at any moment. An alert with a revoke link lets you revoke it before the drain.
Related recipes
Alert on fast outflow from a wallet
SmartAlert adds up withdrawals from your wallet in $ across all tokens and tells you when more than the threshold left within N minutes. Right after the block, no waiting for confirmations.
Alert when a wallet hands control to a contract
SmartAlert spots an EIP-7702 delegation on your wallet seconds after the block, before funds leave it. A delegation emits no events, so ordinary monitoring misses it.
Try it on your own contract
Paste a contract address, pick the recipe, choose where alerts go. The first 14 days have Pro limits.