CenturionDEX Support
Crypto basicsSecurityNetworksFAQsLaunch app

Approval allowance scams#

Last modified: August 10, 2026

An approval allowance is permission for a contract or wallet address to move a token from your wallet later. In many wallets, this appears as an approve request. Approval allowance scams trick you into giving that permission to an attacker.

Approvals are common in decentralized exchanges because a router or contract may need permission to move the CRC-20 token you choose to swap. The risk is the scope: an unlimited or unrelated approval can let a malicious spender drain tokens after you leave the site.

What it looks like#

You visit a fake claim page and expect to receive a reward. Your wallet shows zero CTN being sent, but the details say an unknown spender can use an unlimited amount of your CRC-20 token. You approve it. Later, the attacker calls the token contract and transfers your tokens using the allowance.

Common warning signs#

  • The approval is for a token you were not trying to use.
  • The spender is not the CenturionDEX router or another contract you recognize.
  • The amount is unlimited when a smaller amount would be enough.
  • A claim, support, refund, or verification page asks for token approval.
  • The site asks for both an approval and a separate signature that you do not understand.
  • A wallet simulation cannot explain what the spender can do.

Checks before approving#

  1. Confirm the site through an official source.
  2. Confirm the network is Centurion and the chain ID is 286 when your wallet displays it.
  3. Read the token, spender, amount, and expiry.
  4. Prefer limited allowances when practical.
  5. Cancel if the approval is unrelated to the action you started.
  6. Revoke permissions you no longer need, understanding that revocation has a Centurion network cost measured in Newtons and paid in CTN.

If you approved the wrong spender#

Disconnecting a site does not remove the allowance. Review CRC-20 approvals, NFT operator approvals, permit-style permissions, and smart-account permissions. Revoke anything suspicious through a trusted Centurion-compatible tool. If your recovery phrase or private key was exposed, create a new wallet on a clean device and move remaining assets.

Related#