Docs
How Revokr reads transactions — and why it can never touch your funds.
Overview
Revokr is a read-only companion for the wallet you already use. It decodes every signature request into plain English before you approve it, and lists every unlimited approval already open against your address — priced in dollars, sorted by what a stranger could actually take.
It is not a wallet. It never holds keys, never renders an approve button, and cannot move a cent. That absence is the security model.
- »Zero switching cost — keep MetaMask, Phantom, Rabby, whatever you run today
- »Zero trust required — read-only by architecture, open source from the first commit
- »Zero noise — under 1 in 40 transactions raises anything at all
⚠ Revokr will never print the word "safe". It states what a transaction does; the decision to sign is always yours.
Exposed — the scanner
Paste any address at the app. No wallet connect, no signup, no install. Revokr sweeps approval events across every chain it reads, checks the live allowance for each (token, spender) pair, and prices the exposure.
- INPUT
- any public address — yours or anyone's
- SWEEP
- approval events + live allowances, all supported chains
- PRICING
- exposure = min(allowance, balance) × price
- UNLIMITED
- collapses to your full balance — that is what the spender can take
- OUTPUT
- ranked by dollars at risk, one plain sentence per row
Every row carries a one-click revoke. Revokr builds the calldata; your own wallet signs it. Nothing is ever signed by us — there is no "us" holding anything.
The Read — before you sign
With the extension installed, every signature request is intercepted before your wallet renders it. Revokr resolves the function being called, simulates the transaction against forked state, and classifies the result.
- SILENT
- no warning at all — the common case, on purpose
- NOTE
- informational, one grey line
- WARN
- amber — explains the mechanism in plain words
- CRITICAL
- red, full card — states the worst case that can follow
The wallet's own approve and reject buttons still decide. Revokr has no vote, by design: a tool that blocks gets disabled the first time it is wrong; a tool that explains gets kept.
What it catches
- »Unlimited approvals — permission to move everything, forever, disguised as a transaction that moves nothing
- »Control handoffs — setApprovalForAll, ownership transfers, delegate changes
- »Deferred execution — signed permits and off-chain orders that execute on the attacker's schedule
- »Simulation evasion — contracts that behave differently under simulation than in a real block
- »First-contact spenders — spend rights requested by an address you have never touched
- »Lookalike targets — addresses a few visually-similar characters away from ones you use
⚠ The trap class these share: nothing leaves your wallet at signing time. Your balance not changing is exactly why they look harmless.
Why you don't have to trust us
- KEYS
- none — no key store, no signer, no custody path exists in the codebase
- SIGNING
- all calldata is returned unsigned; only your wallet signs
- SOURCE
- open from the first commit, reproducible builds
- DATA
- no telemetry, no analytics, no addresses logged; scans are stateless
- HEADERS
- CSP, HSTS, frame-ancestors none on every surface
- AUDIT
- external audit before v1.0, published in full
Verify, don't believe: the extension's permissions are justified line by line in the repository, and the build is reproducible so you can confirm the store listing matches the source.
Chains
- ETHEREUM
- approvals, permits, Permit2
- BASE
- approvals, permits, Permit2
- BNB CHAIN
- approvals, permits
- ROBINHOOD CHAIN
- approvals on tokenized-stock and standard ERC-20s
- SOLANA
- token delegate accounts
$REVOKR
The tool ships first. The token launches only after the scanner and extension are live and audited — a security product that launches a token before it works has told you which one it cares about.
- SUPPLY
- 1,000,000,000 — fixed, no emissions
- TEAM ALLOCATION
- 0%
- PRESALE / PRIVATE
- 0%
- LAUNCH
- 100% fair launch on the Robinhood Chain launchpad
- ROLE
- tier access (watchtower slots, builder limits) + registry governance
⚠ Safety is never paywalled. A user holding zero tokens gets the exact same warnings as a whale. The token gates convenience and scale — never protection.
FAQ
Is this a wallet?
No. Revokr sits beside the wallet you already have. It cannot hold, send, or sign anything.
Can Revokr steal my funds?
No. There is no code path that touches a private key. The most Revokr can do is show you a sentence you disagree with.
Do I need to connect my wallet to scan?
No. The scanner reads public on-chain data from any pasted address. Connecting is only needed when you want to sign a revoke — and that signature happens in your own wallet.
What does it cost?
Scanning, decoding, and revoking are free, permanently. Paid tiers cover monitoring at scale and builder rate limits.
Why did Revokr stay silent on my last transaction?
Because it found nothing worth saying. Warnings are rare on purpose — when the screen turns red, it means something.
Revokr is an independent, read-only security tool. It is not a wallet, does not hold keys, and cannot move funds. It is not affiliated with, endorsed by, or sponsored by any network, protocol, exchange, wallet, or company whose assets it reads, including Robinhood Markets, Inc. No security tool catches everything; Revokr describes what a transaction does and never certifies that a transaction is safe. $REVOKR is a utility token for access and governance — it is not an investment, and nothing on this site is financial advice. Digital assets are volatile and can lose all value.