Self-custody, explained: what "connect wallet" really authorizes
BlazePhoenix Engineering · updated 2026-07-18 · 4 min · written from the deployed bytecode
Abstract in 15 languages · resumo · resumen · 摘要 · 要旨 · ملخص
English — Connecting a wallet only reveals your address and lets a site PROPOSE transactions — danger lives in what you SIGN. Approvals authorize specific contracts for specific amounts: sign slowly, verify the contract, revoke the stale.
Português — Conectar a carteira só revela o teu endereço e deixa o site PROPOR transações — o perigo vive no que ASSINAS. Aprovações autorizam contratos específicos por montantes específicos: assina devagar, verifica o contrato, revoga as antigas.
Español — Conectar la billetera solo revela tu dirección y deja al sitio PROPONER transacciones — el peligro vive en lo que FIRMAS. Las aprobaciones autorizan contratos específicos por montos específicos: firma despacio, verifica el contrato, revoca las viejas.
Français — Connecter un portefeuille ne révèle que votre adresse et laisse le site PROPOSER des transactions — le danger vit dans ce que vous SIGNEZ. Les approbations autorisent des contrats précis pour des montants précis : signez lentement, vérifiez le contrat, révoquez l'obsolète.
Deutsch — Eine Wallet zu verbinden zeigt nur deine Adresse und lässt die Seite Transaktionen VORSCHLAGEN — die Gefahr steckt in dem, was du SIGNIERST. Approvals autorisieren bestimmte Contracts für bestimmte Beträge: langsam signieren, Contract prüfen, Altes widerrufen.
Русский — Подключение кошелька лишь раскрывает адрес и позволяет сайту ПРЕДЛАГАТЬ транзакции — опасность в том, что вы ПОДПИСЫВАЕТЕ. Разрешения дают конкретным контрактам права на конкретные суммы: подписывайте медленно, проверяйте контракт, отзывайте устаревшие.
Türkçe — Cüzdan bağlamak yalnızca adresinizi gösterir ve siteye işlem ÖNERME izni verir — tehlike İMZALADIĞINIZDADIR. Onaylar belirli sözleşmelere belirli tutarlar için yetki verir: yavaş imzalayın, sözleşmeyi doğrulayın, eskiyi iptal edin.
العربية — ربط المحفظة يكشف عنوانك فقط ويتيح للموقع اقتراح المعاملات — الخطر فيما توقّعه. الموافقات تفوّض عقوداً محددة بمبالغ محددة: وقّع ببطء، وتحقق من العقد، وألغِ القديم.
हिन्दी — वॉलेट कनेक्ट करना सिर्फ आपका पता दिखाता है और साइट को ट्रांज़ैक्शन प्रस्तावित करने देता है — खतरा उसमें है जो आप साइन करते हैं। अप्रूवल खास कॉन्ट्रैक्ट को खास राशि की अनुमति देते हैं: धीरे साइन करें, कॉन्ट्रैक्ट जाँचें, पुराने रद्द करें।
日本語 — ウォレット接続はアドレスを開示し、サイトに取引の提案を許すだけ。危険は署名する内容に宿ります。承認は特定コントラクトに特定額を許可するもの。ゆっくり署名し、コントラクトを検証し、古い承認は取り消しましょう。
中文 — 连接钱包只是公开你的地址、允许网站提议交易——危险在于你签署的内容。授权是让特定合约动用特定金额：慢慢签、核实合约、撤销过期授权。
한국어 — 지갑 연결은 주소를 공개하고 사이트가 트랜잭션을 제안하게 할 뿐입니다. 위험은 당신이 서명하는 것에 있습니다. 승인은 특정 컨트랙트에 특정 금액을 허용합니다: 천천히 서명하고, 컨트랙트를 확인하고, 오래된 승인은 취소하세요.
Bahasa Indonesia — Menghubungkan dompet hanya mengungkap alamat Anda dan membiarkan situs MENGUSULKAN transaksi — bahayanya ada pada yang Anda TANDATANGANI. Persetujuan memberi wewenang kontrak tertentu untuk jumlah tertentu: tanda tangani pelan, verifikasi kontraknya, cabut yang usang.
বাংলা — ওয়ালেট সংযোগ কেবল আপনার ঠিকানা প্রকাশ করে এবং সাইটকে লেনদেন প্রস্তাব করতে দেয় — বিপদ থাকে আপনি যা সই করেন তাতে। অনুমোদন নির্দিষ্ট কন্ট্রাক্টকে নির্দিষ্ট পরিমাণের ক্ষমতা দেয়: ধীরে সই করুন, কন্ট্রাক্ট যাচাই করুন, পুরনোগুলো বাতিল করুন।
Filipino — Ang pagkonekta ng wallet ay nagbubunyag lang ng address mo at nagpapahintulot sa site na MAGMUNGKAHI ng transaksyon — ang panganib ay nasa PINIPIRMAHAN mo. Ang approvals ay nagpapahintulot sa tiyak na kontrata para sa tiyak na halaga: dahan-dahang pumirma, i-verify ang kontrata, bawiin ang luma.
Connecting a wallet to a site reveals your address and lets the site PROPOSE transactions — nothing more. Nothing moves without your explicit signature, and every signature request shows you what it does before you approve. A site cannot drain a connected wallet by connection alone; the danger lives in what you SIGN.
The signature that matters most is the token APPROVAL: it authorizes a specific contract to move up to a specific amount of a specific token from your wallet. Approvals are how every DEX works — but an UNLIMITED approval to a malicious contract is how wallets get drained. The defense is boring and effective: approve only what the trade needs, to contracts you can verify, and review your standing approvals occasionally (revoke tools exist on every chain).
Custodial vs self-custodial — the real difference
On a custodial exchange, the exchange holds your tokens and you hold a claim; solvency is a promise you cannot check. Self-custodial trading inverts it: your tokens never leave your wallet until the atomic moment of the swap, and the contract that touches them is public, verified code. The trade-off is responsibility: nobody can freeze your funds, and nobody can recover your mistakes.
The two habits that prevent most losses: sign slowly (read every approval — amount, token, contract), and prefer venues where what you are signing is verifiable — this Router's address is published, verified on every chain's explorer, and its rules (like the minimum-output floor) execute in bytecode you can read.
Do not trust this page — reproduce it
Every claim above is checkable against the chain. Start here:
before your next approval, paste the contract address into the block explorer — verified source with a green check, or walk awayContracts are verified on every chain we deploy to — addresses in the protocol manifest. Deeper formal treatment: the whitepaper (PDF).
Share this article · join the discussion