Crypto Gambling Sites Accumulating Risky Token Approvals

The practice of token approvals has become a common occurrence in crypto gambling sites. Users often grant unlimited allowances to platforms, which can lead to a build-up of dormant permissions.

Disconnecting from a site does not remove these permissions, and users may accumulate multiple approvals over time. This exposes them to potential risks, such as approval drainers exploiting compromised contracts.

A recent analysis found that approval drainers were the largest category of DeFi losses in 2022, with CertiK estimating the cost of phishing attacks at over $1 billion in 2024.

Permit2 is a proposed standard aimed at replacing standing allowances with deadline-bound permits and nonces. This change would automatically expire authorizations, reducing the risk of dormant permissions.