“撤銷”總是安全的，對嗎？

加密用戶認為，撤銷批准時的安全性是安全的，但是騙子已經發現了一種利用此功能的方法。

"Revoke" is always safe, right? Most crypto users would say so, especially since it's often touted as a key part of Web3 wallet hygiene. But while users believe they are safe when they cancel or "revoke" token approvals, scammers have discovered a way to exploit this feature with devastating efficiency. They create fake approval scams to trick users into personally paying an expensive gas price to secure their wallets.

“撤銷”總是安全的，對嗎？大多數加密用戶會這樣說，尤其是因為它通常被吹捧為Web3錢包衛生的關鍵部分。但是，儘管用戶認為他們在取消或“撤銷”令牌批准時是安全的，但騙子已經發現了一種以毀滅性效率來利用此功能的方法。他們創建了偽造的批准騙局，以誘使用戶親自支付昂貴的汽油價格以確保其錢包。

In their previous Web3 Wallet Security blogs, they discussed the dangers of approving smart contract transactions without fully understanding the implications, and we've also written about the importance of checking your token approvals regularly to prevent any misuse of your funds. Today, we'll be examining a new variant of crypto scam and how to avoid it.

在他們以前的Web3錢包安全博客中，他們討論了批准智能合約交易的危險，而無需完全理解含義，我們還寫了關於定期檢查您的令牌批准以防止任何濫用資金的重要性。今天，我們將檢查加密騙局​​的新變體以及如何避免它。

What are fake approval scams?

什麼是假批准騙局？

Binance explains that false approval frauds use the word "revoke" to deceive customers into thinking they are reversing transaction rights granted to unfamiliar platforms or smart contracts. When customers attempt this action, they end up paying an unusually high "gas fee" to complete the transaction.

Binance解釋說，虛假的批准欺詐使用“撤銷”一詞來欺騙客戶認為他們正在逆轉授予不熟悉平台或智能合約的交易權。當客戶嘗試此操作時，他們最終會支付異常高的“汽油費”來完成交易。

The Lure: While casually browsing their token approvals on a blockchain explorer like Etherscan or inside their wallet, the user spots an unfamiliar approval for a token they don't recognize. It looks like some unknown contract has been granted access to their valuable assets. Panic sets in as the user instinctively rushes to revoke the approval, believing they are saving their crypto from theft.

誘餌：雖然隨便在像etherscan這樣的區塊鏈探險家或錢包內瀏覽其代幣批准，但用戶發現對他們不認識的代幣的不熟悉的批准。看來一些未知合同已被授予獲得其寶貴資產的訪問權。當用戶本能地急於撤銷認可時，恐​​慌出現了，他們認為他們正在將加密貨幣從盜竊中保存下來。

The "revoke" transaction the user triggers is real; it's a legitimate action on the blockchain, but it's designed to cost them an arm and a leg in transaction fees. The scammer, in anticipation of the user's desperate move, profits massively from these inflated transaction costs, which they planned to use for minting new tokens or another malicious action under their control. Ultimately, what the user thought was a protective move turns into an expensive mistake. The fake approval was merely bait to lure them into paying for nothing.

用戶觸發的“撤銷”交易是真實的；這是對區塊鏈的合法動作，但旨在使他們付出一支手臂和交易費用的腿。詐騙者預計用戶的拼命舉動，從這些膨脹的交易成本中大量獲利，他們計劃將其用於造成新的代幣或其他惡意行動。最終，用戶認為的是保護性舉動變成了一個昂貴的錯誤。偽造的批准只是誘餌是為了吸引他們一無所獲。

While these scams don's directly steal funds, they exploit the user by draining their wallet through outrageously high gas fees, leaving the rest of their assets untouched. The scammer had no intention of stealing the user’s tokens in the first place.

儘管這些騙局直接竊取了資金，但他們通過耗盡高昂的汽油費來利用用戶，而其餘資產則未受到影響。騙子首先無意竊取用戶的令牌。

How to Spot and Avoid These Scams

如何發現並避免這些騙局

Stay calm

保持冷靜

Scammers rely on fear and urgency to make you act quickly and foolishly. If something seems off, take a step back, breathe, and fully assess the situation before reacting. A clear head is your best weapon against being tricked by their deceptive tactics.

騙子依靠恐懼和緊迫性使您迅速而愚蠢地行事。如果似乎有些不對勁，請退後一步，呼吸並充分評估情況。明確的頭是您最好的武器，不要被他們的欺騙性策略所欺騙。

Double-Check before you click

單擊之前雙檢查

Before approving any transaction, take a moment to review the details. Does the amount look right? Do you recognize the contract address? Are there any odd warnings or unusual fees? If something feels off, triple-check with trusted sources, like the official website of the platform or community forums, to verify the transaction details.

在批准任何交易之前，請花點時間查看詳細信息。金額看起來正確嗎？您認識合同地址嗎？是否有任何奇怪的警告或不尋常的費用？如果有什麼感覺，可以通過可信賴的來源（例如平台或社區論壇的官方網站）進行三次檢查，以驗證交易詳細信息。

Know your fees

知道您的費用

Familiarize yourself with the average size of gas fees on the chains you use. If a transaction fee seems suspiciously high or unusual for the network at the time, it could be a red flag. Use tools like Etherscan's Gas Tracker, GasNow, or Blocknative's Gas Estimator to monitor real-time gas prices and estimate the expected costs before proceeding.

熟悉您使用的鏈條上的平均汽油費用。如果當時網絡的交易費似乎是可疑的或不尋常的，那可能是一個危險信號。使用Etherscan的氣體跟踪器，Gasnow或阻滯劑估算器等工具來監視實時氣價，並在進行前估計預期成本。

Constantly educate yourself

不斷教育自己

Scammers are constantly devising new tricks, but knowledge is your strongest defense. The more you understand about emerging threats and best practices for online safety, the better equipped you are to spot red flags and avoid these scams. Stay updated with Binance Academy for the latest information and tips. You can also delve into our Web3 Wallet Security series for deeper insights into the latest scams and how to stay safe.

騙子一直在設計新技巧，但知識是您最強大的防禦。您對在線安全的新興威脅和最佳實踐了解越多，您就可以發現危險信號並避免這些騙局的能力越大。請訪問Binance Academy的最新信息和提示。您還可以深入了解我們的Web3錢包安全系列，以更深入了解最新的騙局以及如何保持安全。

Scammers thrive on urgency, but a little vigilance goes a long way. The best defense against these deceptive tactics isn't just knowing they exist, but staying one step ahead in the ever-evolving landscape of Web3 security.

詐騙者在緊迫的情況下蓬勃發展，但警惕很長一段路。對這些欺騙性策略的最佳防禦不僅僅是知道它們存在，而且在不斷發展的Web3安全景觀中領先一步。