Approval Audit Log for Wallet

WHAT IT DOES

Approval Audit Log for Wallet is a comprehensive security and record-keeping tool that maintains a complete, searchable history of every wallet approval you've granted across all websites. When you visit any webpage, the tool scans for approval-related content and automatically logs any detected approvals, including the contract address, spender/operator address, approval type (ERC-20 approve, ERC-721 setApprovalForAll, ERC-1155 setApprovalForAll), amount (or "unlimited"), timestamp, domain, and transaction hash. The panel displays the full audit history in a searchable, filterable interface with columns for each data point and a status indicator (Active, Revoked, Expired). You can filter by contract address, spender address, approval type, date range, and status, making it easy to audit your approval activity. A summary view shows total approvals, active approvals, and approvals by domain. The export function generates CSV or JSON reports of the complete audit log for record-keeping or analysis. The tool also monitors the current approval state via eth_call to detect changes and updates the log accordingly.

WHERE IT RUNS

This overlay operates on any website (matching all URLs) across the entire web. It works in any browser that supports the BotGentz extension framework and has an EVM-compatible wallet extension installed. The panel activates on every page, scanning for approval requests and building a comprehensive audit history over time.

HOW TO USE

Install the extension and connect your wallet. The tool automatically begins building your approval audit log, detecting and logging approvals as you browse. To view your audit log, open the panel—it displays all logged approvals in reverse chronological order with contract, spender, type, amount, status, date, and domain. Use the filter dropdowns to filter by approval type or status, and use the search box to find specific contract or spender addresses. The summary section shows totals and breakdowns at a glance. To export your log, click "Export CSV" or "Export JSON"—the data is copied to your clipboard for pasting into a spreadsheet or analysis tool. Configure settings including log retention period (30-365 days), auto-log toggle, notification on new approval toggle, and export format preference. Use the "Clear Log" button to reset your audit history if needed.

MECHANISM: COMPREHENSIVE APPROVAL LOGGING WITH DOM SCANNING AND STATE VERIFICATION

The extension implements a multi-layered approval detection system that captures approvals through three complementary mechanisms. First, DOM scanning analyzes page content for approval-related keywords ('approve', 'setApprovalForAll', 'permit', etc.) and contract addresses (0x... patterns), triggering automatic logging when both are detected on the same page. Second, wallet transaction monitoring captures approval transactions sent through the user's wallet, logging them with the transaction hash for on-chain verification. Third, periodic state verification uses eth_call to query the current allowance (ERC-20) or isApprovedForAll (ERC-721/ERC-1155) status for logged contracts, detecting when approvals are modified or revoked and updating the log status accordingly. Each log entry stores the contract address, spender/operator address, approval type, amount (normalized to "unlimited" for max uint256), timestamp, domain, and transaction hash (when available). The tool uses local storage (GM_setValue) to maintain the audit log across browser sessions, with configurable retention periods to manage storage size. The export function generates properly formatted CSV with headers for spreadsheet import or JSON for programmatic analysis. The summary view aggregates totals and status counts, providing a quick security overview of all active approvals.

THE PANEL

The overlay panel is fully draggable via its title bar and remembers its position per-site using GM_setValue. It snaps to the nearest edge when dragged within 40px of any screen boundary. The panel includes clear sections for audit log (wallet address, domain, total entries, summary with active/revoked/expired counts), filters (type dropdown, status dropdown, search input), entries (list of logged approvals with contract, spender, type, amount, status, date, domain, and transaction hash for each entry), actions (Refresh, Export CSV, Export JSON, Clear Log), and settings (retention period selector, auto-log toggle, notification toggle, export format selector, Save Settings button). The entries section displays up to 20 entries at a time, sorted with the most recent first. Each entry shows status with color coding—green for active, red for revoked, yellow for expired. Pressing Escape temporarily dismisses the panel until you navigate to a new page or manually reactivate. The panel automatically refreshes when new approvals are detected or when approval state changes.

PLEASE NOTE

This extension requires the free BotGentz framework extension to be installed and active. You must also have a real EVM-compatible wallet extension (such as MetaMask, WalletConnect, Coinbase Wallet, or Rabby) already installed in your browser—the overlay uses your wallet's RPC provider for eth_call queries and transaction monitoring. This tool is read-only—it does not modify, block, or intercept wallet approval popups (wallet UI is browser-native and not accessible). It only logs and displays approval data. The tool cannot detect approvals that occurred before installation (no historical data); cannot fetch full transaction history for wallets with many transactions (RPC limitations); depends on on-chain event logs which may be incomplete for older blocks or on some chains; cannot detect approvals that are revoked off-chain or via mechanisms the tool does not monitor; does not support non-EVM chains where event log formats differ; and cannot detect approvals that are granted via proxy contracts or multi-hop transactions unless they emit standard approval events. No private keys, wallet balances, browsing history, or approval data are ever collected, transmitted, or stored outside your local browser—all data is stored locally using GM_setValue with your chosen retention period. This tool is a security aid, not a guarantee—always verify your active approvals regularly.