Approval Audit

Identify live ERC-20 allowances on Base and flag unlimited or risky grants.

Updated Jun 2, 2026
One-click install
npx skills add https://github.com/Atrium-Hermes/atrium-lighthouse --skill approval-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Approval Audit
Source: https://github.com/Atrium-Hermes/atrium-lighthouse/tree/main/skills/approval-audit
Command: npx skills add https://github.com/Atrium-Hermes/atrium-lighthouse --skill approval-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security-conscious wallet owners struggle to keep track of active ERC-20 allowances that could be abused by malicious contracts. This skill inventories live approvals on Base and highlights unlimited or risky permissions to help you revoke them promptly.

Core Features & Use Cases

  • Inventory live ERC-20 approvals for a target wallet on Base and flag unlimited or suspicious grants.
  • Verify current allowances to filter out revoked or spent approvals.
  • Generate a concise verdict and recommend revocation actions for proactive security.

Use cases include everyday wallet risk assessments, audits for DeFi wallets, and security reviews for asset management on Base.

Quick Start

Audit a wallet by providing its Base address to begin the live-approval scan and risk assessment using the skill's default configuration.

Frequently Asked Questions about Approval Audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit ERC-20 approvals on Base for risky unlimited allowances?

To audit ERC-20 approvals on Base, you need to scan a target wallet's Approval events using eth_getLogs and verify live allowances via eth_call to flag unlimited or risky token grants.

What is an ERC-20 allowance audit and how does it identify risky wallet permissions?

An ERC-20 allowance audit inventories active token approvals on a blockchain, filtering out revoked permissions by validating current allowances to highlight malicious or unlimited contracts.

How do I check live ERC-20 approvals for a wallet on the Base network?

You check live ERC-20 approvals on Base by reading recent Approval event logs for a target wallet and verifying their current state to surface newly granted or revoked permissions.

Can I filter out revoked or spent ERC-20 token approvals during a Base security audit?

Yes, you can filter revoked or spent ERC-20 approvals during a Base security audit by verifying current allowances with eth_call, ensuring only currently active permissions are reported.

Does checking token allowances on Base require connecting to a specific RPC environment?

Checking token allowances on Base requires operating on the Base RPC environment to read Approval events and validate active permissions directly from the blockchain network.