🔒 Security Coop — Cluck Norris

Connecting a wallet is safe. It shares only your public address — no spending power, no signature. The risk that can quietly linger is a token approval: when you sign an "approve", you let another address move some of a specific token out of your wallet, and that permission stays until you revoke it. The Security Coop scans your wallet for every active approval and lets you clear any you don't recognise — signed in your own wallet, in one tap. 🔓 This checks every approval on your wallet, from any app you've ever touched — not just Cluck Norris. Our own tools never request an approval, so there's nothing of ours to find here.

1 · CONNECT WALLET

📖 WHAT IS A TOKEN APPROVAL — AND WHY THIS MATTERS

Connecting ≠ signing. Connecting your wallet to a site grants nothing — it just lets the site see your address. Disconnecting is cosmetic. Signing a transaction is the real action: that's when you authorise something on-chain. The habit that keeps you safe is simple — read what you're signing, on every site, every time.

What an approval (delegate) is. An SPL token account can have a delegate — an address you've authorised to move up to a set amount of that token out of your wallet. It's useful for things like trading and staking. But a malicious or careless app can ask for one and then pull the tokens later. The approval doesn't expire on its own — it sits there until you revoke it.

What this tool does. It reads your token accounts — both the Token and Token-2022 programs — and lists any with an active delegate: which token, how much is approved, and to whom. Revoking builds a standard SPL Revoke transaction that clears the delegate. You sign it in your own wallet; nothing here ever touches your keys.

What it does not cover. Solana has no open-ended "spend my SOL forever" allowance like some chains — the delegate approval is the real lingering risk, and that's what this clears. A clean scan means nothing is delegated; nothing can be moved by anyone but you.

SECURITY COOP