Infinite Approval
Web3 / wallets security
Infinite approval is a common practice where users grant smart contracts unlimited spending rights over their tokens rather than setting transaction-specific limits. When a decentralized application requests approval to spend tokens, users may authorize an arbitrarily large amount—effectively unlimited—to avoid repeated approval transactions and gas fees. While convenient, this creates significant security risks because a compromised or malicious smart contract could drain the user's entire token balance without additional authorization steps. The practice highlights fundamental UX-security tradeoffs in blockchain interactions, where convenience often comes at the cost of enhanced vulnerability to code exploits or protocol upgrades introducing unexpected behaviors. Example: A user approves an Uniswap router contract for unlimited USDC spending to facilitate swaps, but if the router is later exploited or the user's private key is compromised, attackers could execute unlimited unauthorized token transfers. Why it matters for crypto security: Infinite approvals represent a critical attack vector in DeFi, responsible for millions in losses across hacks and scams. Understanding approval risks is essential for users navigating decentralized finance safely, making informed delegation decisions crucial for protecting digital assets.
Explore the full Web3 Glossary — 2,062+ expert-curated definitions. Need guidance? Talk to our consultants.