A smaller
permission surface.
Cutoff reads direct ERC-20 allowances on Kinetiq Elysium. It sends a zero-allowance request only when the token owner chooses to revoke.
What an allowance means
A token contract records how much a spender may transfer from an owner. The allowance is independent of whether a website is currently connected to that wallet. Disconnecting does not clear that record.
Exact lookup and recent discovery
An exact lookup queries allowance(owner, spender) on the token you enter, with all reads pinned to the displayed block. Symbols and decimals are optional metadata. If unavailable, Cutoff displays the raw integer and full contract address. Metadata is untrusted and does not identify a legitimate project.
Recent discovery searches the latest 10,000 blocks for Approval events with your owner address, in bounded batches. It deduplicates token/spender pairs. Select a pair to check its current allowance. Coverage and partial failures are shown. This is not a complete approval inventory or security audit. Older permissions, nonstandard events, NFTs, Permit2 sub-allowances and unsubmitted permit signatures are not covered.
How revocation works
Cutoff checks the connected signer is the inspected owner, verifies chain ID 99901, rereads allowance and simulates approve(spender, 0). If the call explicitly returns false or reverts, sending is blocked. Nonstandard tokens returning no value are accepted only after successful simulation. After receipt, the app rereads the allowance at the confirmed block and reports success only if it is zero.
The call sends no native value and requests no transfer. Gas in HYPE is required. Malicious token contracts can behave differently from ERC-20; review the target address and wallet simulation. An in-flight spend may occur before your revoke is included. Revocation cannot recover transferred funds or prevent spending through a different permission.
Network and transport
Elysium chain 99901 is separate from HyperEVM chain 999. Cutoff reads through rpc.thekleos.xyz. Transactions use your wallet's configured Elysium transport. Public relays may reject calls or delay inclusion. A returned hash is not confirmation. Cutoff saves a pending hash locally and checks its receipt instead of automatically sending another transaction.
Fees and custody
Cutoff has no custody contract and no platform fee. It never needs your private key or seed phrase. A separate project token is not required for any action.
Verification status
Network identity and the live read path are checked against Elysium. Local integration tests cover approval, zero-allowance revocation and failure handling. A real public-network revoke requires a funded owner wallet and is separate from local tests.