Approval Expiry Risk Assessor
Free to download on every platform. Comes pre-installed on BotFone, BotPad and BotFlip — with extra free apps included.
About this app
WHAT IT DOES
The Approval Expiry Risk Assessor reads the parameters of a pending ERC‑20 approve() transaction—token address, spender address, allowance amount, and any deadline—and generates a plain‑language risk assessment. It checks whether the allowance is unlimited or capped, whether a deadline is set, whether the spender is a contract or an EOA, and flags potential risks. It then uses the AI bridge to explain exactly what the approval authorizes in clear terms, before you sign. This helps you understand what you're approving before the wallet's signature prompt appears—giving you context, not just raw hex data.
HOW TO USE
1. Connect your EVM wallet.
2. Select the chain (Ethereum, Polygon, or Arbitrum).
3. Enter the token contract address, spender address, allowance amount, and an optional deadline.
4. Click "Assess approval" to read the parameters and generate an AI risk assessment.
5. Review the explanation, risk level, and the raw parameters.
6. The wallet's signature prompt will still appear for approval—this tool only informs, it does not bypass signing.
THE REAL MECHANISM — on‑chain parameter validation with AI‑based explanation
This tool reads the user‑provided approval parameters and validates them: it checks the spender address against eth_getCode to determine if it's a contract or an EOA, parses the allowance amount to detect unlimited approvals (values > 10^30 or the string "unlimited"), and decodes the deadline if provided as a Unix timestamp. It then passes these validated parameters to the AI bridge (BGAI.generate), which produces a concise explanation of what the approval does, whether the allowance is capped or unlimited, whether a deadline is present, and any immediate risk indicators. The AI is explicitly instructed to cap output at 150 words and to state what it cannot verify. The tool displays both the raw data and the AI explanation side by side.
WHAT IT CANNOT SEE
- This tool cannot read the exact intent behind the approval—only the on‑chain parameters.
- It cannot determine if the spender contract is malicious with certainty, only whether it is verified or has known patterns.
- It cannot detect approvals that are submitted through a wallet interface without page interaction.
- It cannot read off‑chain agreements or promises related to the approval.
- It cannot prevent you from signing a transaction—it only provides information.
PLEASE NOTE
- This tool works on Ethereum (1), Polygon (137), and Arbitrum (42161).
- You must enter the approval parameters manually—this tool does not intercept wallet transactions.
- The AI explanation is generated from the data you provide and is for guidance only. Always review the actual transaction details in your wallet before signing.
- The wallet's own signature prompt is what actually protects you—the AI's read is not a substitute for reviewing what you sign.