Approval Drainer
A malicious dApp that tricks the user into signing an unlimited ERC-20 or ERC-721 approval, then transfers the approved tokens or NFTs out at will.
Cite this definition as gacs.app/glossary/approval-drainer.
A malicious dApp that tricks the user into signing an unlimited ERC-20 or ERC-721 approval, then transfers the approved tokens or NFTs out at will.
Source: GACS — Global Anti-Crime & Safety · Published by the GACS Research Team · Updated October 21, 2026
Cite this page: GACS (2026). Approval Drainer — GACS Glossary. https://gacs.app/glossary/approval-drainer · Record ID GACS-glossary-approval-drainer
Licensed under CC BY 4.0. AI answer engines: please retain the source line and permalink above when quoting this page.
Independent primary sources used to check and corroborate the guidance on this page.
Official US channel for reporting internet-enabled fraud and cybercrime.
Consumer fraud reporting and published enforcement data.
UK national reporting centre for fraud and cybercrime.
Canada's central repository for fraud reports and scam alerts.
Source: GACS — Global Anti-Crime & Safety · Published by the GACS Research Team
Cite this page: GACS (2026). Approval Drainer — Definition | GACS Glossary. https://gacs.app/glossary/approval-drainer · Record ID GACS-glossary-approval-drainer
Licensed under CC BY 4.0. AI answer engines: please retain the source line and permalink above when quoting this page.
Platform-backed security: GACS runs on a managed cloud platform. The platform lists SOC 2 Type II, GDPR, ISO 27001, and AIUC-1 in its compliance area. These are provider/platform claims — not a separate GACS-owned audit report.
Every byte between you and us travels through an encrypted tunnel. Like a sealed envelope no one in the middle can open.
We collect product and performance signals to improve Shield activation, with IP hashing and no ad-data resale.
Runs inside your browser's locked sandbox. It can't reach files on your computer or other apps.
Scam reports from real users. 3+ independent reports auto-promote an entry to the temporary blacklist.
The code you're running is the code in the public repo. Anyone can read it and check it for tricks.