All templates

Automated Token Approval Audits

Every Monday, WebRun opens Etherscan for the wallet address you nominate, reads the token approvals still granted to contracts, checks the token balance sitting behind each approval and when you last interacted with that contract, posts the ranked list to Slack, and sends a short Telegram summary of what is worth revoking.

Runs on WebRun · Strict Lockdown policy
Every Monday at 9:00 AM WebRunorchestrates each step
1 Etherscan read standing token approvals
2 Slack post the ranked approval list
3 Telegram summarise what to revoke
In short

How do I review which contracts can still spend tokens from my wallet?

WebRun audits your wallet permissions every Monday. It reads the token approvals still granted by your address on Etherscan, checks the balance behind each contract and when you last used it, posts a ranked list to Slack, and sends a Telegram summary, so stale approvals get revoked before they are exploited.

  • Stale approvals surface weekly instead of being forgotten
  • Each approval is ranked by the token balance actually at risk
  • Read only by design: no key, no signature, no transaction

Built for crypto holders · DeFi users · treasury managers · web3 teams

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens etherscan.io in a real browser with your saved login - no setup, no API keys.

  2. 1
    Etherscan - read standing token approvals
    etherscan.io
    WebRun in Etherscan: read standing token approvals
    WebRun opens Etherscan to read standing token approvals.
    • Open Etherscan and load the wallet address you nominate
    • Read the token approvals the address still has open
    • For each approval note the token, the approved contract, and whether the allowance is capped or unlimited
    • Read the wallet balance of that token, so the amount exposed is clear
    • Note the date of the last transaction with that contract

    Done when Every open approval is listed with its token, contract, allowance, and balance.

  3. 2
    Slack - post the ranked approval list
    slack.com
    WebRun in Slack: post the ranked approval list
    WebRun opens Slack to post the ranked approval list.
    • Post the full approval list to your private channel, highest exposure first
    • Show the token, the contract, the allowance, and the token balance for each row
    • Mark approvals to contracts you have not touched in 90 days as stale
    • Include the Etherscan link per row so any contract can be checked in one click

    Done when This week's ranked approval list is in Slack.

  4. 3
    Telegram - summarise what to revoke
    telegram.org
    WebRun in Telegram: summarise what to revoke
    WebRun opens Telegram to summarise what to revoke.
    • Send a short summary: how many approvals are open and how many are stale
    • Name the two or three with the largest balance behind them
    • Say plainly that revoking is a wallet action you take yourself

    Done when You have the weekly summary and know what needs attention.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
etherscan.io
ScheduleRuns automatically on this cadence
Every Monday at 9:00 AM
DeliveryHow each run's result reaches you
Approval audit · Telegram
OutputWhat each run produces - A weekly list of open token approvals with the contract, allowance, token balance behind each, and the date you last used that contract.
Text
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Will it revoke approvals or sign anything?

No. WebRun only reads public blockchain data on Etherscan and reports it. It never connects a wallet, signs a transaction, or moves funds. Revoking is a decision you make and execute yourself.

Does it need my private key or seed phrase?

No. It reads a public wallet address on Etherscan, which needs no credentials at all. Nothing about your keys is ever entered, stored, or requested.

How does it decide which approvals matter most?

It ranks by the token balance sitting behind each approval, then flags contracts you have not interacted with in 90 days, so unlimited allowances on funded tokens sit at the top.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.