Unlimited approval drain
If TRC20 tokens left after an unlimited approve, the spender used transferFrom. How to read remaining allowances, revoke leftovers, and avoid fake refunds.
What a drain looks like on-chain
You signed approve (often unlimited) to a spender you did not really identify. Later, transferFrom moved USDT or other TRC20 while you were offline. There may be no second “send” popup that looks like a withdrawal.
The approval table still shows the spender with unlimited remaining unless they already zeroed it — usually they leave it so they can pull again.
First actions that help
Paste the T-address here. Filter Unlimited and Risk. Revoke unknown spenders from your wallet immediately — especially official USDT TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t. Then move remaining tokens to a fresh wallet if you also leaked a seed.
If you only leaked an approve, not a seed, revoke may be enough. If you typed 12 words, the keys are burned.
Actions that make it worse
Fake refund DApps, “TRON police” chats, seed-to-restore forms, paying a clearance fee. Close them. This desk cannot claw back confirmed transferFrom.
Named SunSwap unlimited is usually not this problem unless the spender hex is not actually SunSwap.
How we show the leftover permission
approve/list remaining + unlimited flag + spender label. We do not send revoke. Deep scan is optional read-only ~2–3 TRX.
Independent desk. Not TRON Foundation.
Aftercare
Re-check until unknown unlimited rows are gone. Document hashes. @wholetron with public hashes only.
Independent desk: lists only, never a seed phrase, help at @wholetron with public addresses only.
FAQ
Can you reverse the drain?
No. Confirmed transferFrom is final.
Why no send popup?
The popup was the earlier approve; transferFrom used that permission.
First revoke target?
Unknown unlimited USDT on the official contract.
Is named DEX unlimited a drain?
Usually not if the spender is really that router.
Seed into a refund site?
Never.
Help?
@wholetron with tx hashes.