Chapter 11
Safety
A signature is scoped. A swap approval is approve(spender, sellAmount) to the swap contract. A TWAP approval is the order total to the TWAP contract. A limit approval is the order size to the Ophis relayer. None of these is a reason to approve unlimited, and none of them is a seed phrase.
Spenders
- Swap: 0x28c3a7E8fAbcD7e00037237d6be61F8975247774. Pulls from
msg.senderonly. - TWAP: 0xe44d758090f619627bd74625103f10d7E7A65Bfe.
transferFromof one slice at a time. - Limit: 0xB52C38097c19cd38238c62DD36027a7918eFa890.
Token check
The trade screen and Safety run an automated check: a simulated buy and sell, a comparison of the quote with what the simulation delivered, a scan for owner, mint, pause, blacklist, and tax calls, and a read of pool or curve size. The number is out of 100. A failed sell caps it at 30. This is not an audit. A function with an unusual name can be missed.
Leftover approvals
Approvals lists allowances still open on this chain. Anyone can read an address. Revoke is available only for the connected wallet, and each row is its own approve(spender, 0). Permit2 allowances are not in that list.
Multicall3
Do not approve 0xcA11bde05977b3631167028862bE2a173976CA11. An allowance there can be pulled by any caller who builds a multicall, until you set it to zero. approve(spender, 0) revokes it. Swap shows a Revoke button when that leftover allowance is present.
The site
rocketswap.fun is the site. RocketSwap does not DM first and does not ask for a seed phrase. A contract address in a chat is not this list. Compare it to Contracts.