Checking this wallet on every EVM chain Wardcrest covers…
Checking this wallet on every EVM chain Wardcrest covers…
A delegation stays in force until the account signs a new one. Wardcrest never asks you to connect a wallet or sign anything, and cannot clear it for you:
Revoking token approvals does not clear a delegation. An approval lets another contract spend one token; a delegation makes the delegate’s code your account. While it is in force that code can move every token and coin directly, and grant new approvals as fast as you revoke them. Clear the delegation first, then revoke what is left.
If you typed your recovery phrase into a site, or someone may have a copy of the key, clearing is not enough: whoever holds the key can delegate again. Move what is left to a new wallet with a new recovery phrase.
Before you sign the next request, paste it into the signature request decoder: it names the contract an EIP-7702 authorisation would hand your account to.
One address, on every EVM chain Wardcrest covers and has switched on: whether the account is delegated to a contract under EIP-7702 and what that contract is; the ERC-20 approvals still in force, ranked the way the token approvals checker ranks them; lookalike addresses planted in its recent history; and transactions with addresses on the OFAC SDN list or labelled as scams, hacks or drainers. The chains are read in parallel, and one that does not answer says so without holding up the rest.
Since Ethereum’s Pectra upgrade in May 2025, one signature can point an ordinary account at a smart contract. From then on the contract’s code runs as the account, with access to everything in it. Wallets use this for smart-account features such as batching several actions or paying fees in tokens. Drainer kits ask for the same signature, pointing the account at a contract that sweeps whatever arrives.
By its address, never by its name. Wardcrest keeps a list of the smart-account contracts wallets ship (MetaMask, Coinbase Smart Wallet, Ambire, Uniswap Wallet and a few more), each checked on-chain. Any other delegate is critical when its source is not published or cannot be checked, and high when it is published but not a known wallet: published code can still sweep funds.
Sign a new EIP-7702 authorisation that names the zero address, for each chain the delegation is on. If your wallet can switch the account back to a standard account, that does it for you. Sign with wallet software you trust on a clean device, and let a separate, clean wallet send and pay for the transaction, so you never send coins to an account a sweeper may be watching. If the key or recovery phrase may be exposed, move what is left to a new wallet instead.
An approval lets another contract spend one token. A delegation makes the delegate’s code your account: it can move every token and coin directly, and grant new approvals as fast as you revoke them. Clear the delegation first, then revoke what is left.
No. The check sends the address to the chains and block explorers it reads, and keeps the answers in memory for five minutes so a second look is quick. Nothing is written to Wardcrest’s database or logs. The address is part of the page’s link, so it stays in your browser history like any other page. Wardcrest never asks you to connect a wallet or sign anything.
Bitcoin and chains Wardcrest does not cover; authorisations and permits you signed that nobody has submitted yet; NFT approvals and allowances held inside Permit2; history older than the latest transactions on each chain; and whether anyone has a copy of your key. A result with nothing flagged means these checks found nothing, not that nothing is wrong.