What is a spender contract
A spender contract is the TRC20 address allowed to call transferFrom. Learn how routers, markets, and unknown spenders appear in approval tables.
Owner, token, spender
You are the owner. The TRC20 contract holds balances and allowances. The spender is whoever you named in approve. Only that contract (or address) may pull with transferFrom under that slot.
If you approved a phishing contract, that hex is the spender — not the logo on the website.
Routers are spenders on purpose
SunSwap-style routers need to be the spender so they can move tokens into the pool during a swap. Lending markets need the same. Named spenders are normal DeFi.
Unknown spenders are normal only if you knowingly deployed or audited them — rare for retail.
How labels appear
TronScan may attach a project name. Empty name means verify on an explorer before you leave unlimited USDT pointed at it. Risk tags from security/auth/data add another signal.
This desk surfaces both.
Wrong spender problems
Rushed signatures approve the wrong contract. Fix is revoke, not “support chat.” See problem-wrong-spender.
We do not send the revoke.
Independence
Not TRON Foundation, Tether, SunSwap, TronLink. Never a seed. @wholetron.
Independent desk: lists only, never a seed phrase, help at @wholetron with public addresses only.
FAQ
Is the spender my wallet?
No. Your wallet is the owner; spender is who can pull.
Can an EOA be a spender?
Yes, but DeFi usually uses contracts.
Named vs unknown?
Named = TronScan label; unknown = verify manually.
Sample named spender?
SunSwap on sample TRX6Q82wMqWNbCCiLqejbZe43wk1h1zJHm.
Do you blacklist spenders?
We list and show risk tags; we do not operate a court.
Help?
@wholetron.