Is My Crypto Wallet Hacked?
Unfamiliar tokens alone do not mean you were hacked, but some signs deserve immediate action. Here is how to tell the difference.
Updated October 14, 2026 • Dust Sweeper Team
Seven warning signs
- Transactions you did not make appear in your history.
- Token approvals you do not recognise, especially unlimited ones.
- Funds leave soon after you connected to a new site or signed something.
- Your seed phrase or private key was typed into a website, shared in a chat or stored in a cloud note.
- A “support” person contacted you first and asked for a phrase or screen share.
- You installed a wallet extension or app from an unofficial source.
- Repeated prompts to sign or verify from a site you did not intend to use.
What is normal
Spam tokens and tiny unsolicited transfers are common and do not mean your keys are exposed. The real indicators are outgoing transactions you did not authorise and approvals you cannot explain.
What to do right now
- Stop signing anything and disconnect your wallet from all sites.
- If the seed phrase may be exposed, create a new wallet on a clean device and move assets there. The old keys are compromised permanently.
- Review approvals on each network and revoke unknown ones with an approval-checking tool.
- Move the most valuable assets first, keeping network fees in mind.
- Remove suspicious browser extensions and scan the device for malware.
Check what is exposed across networks
Approvals and balances are per network. Review each network you use. A read-only scan shows the balances on seven networks (Ethereum, BNB Smart Chain, Polygon, Arbitrum, Base, Optimism, Avalanche), and the token risk scanner shows contract risk signals as a heuristic.
Prevention
- Keep your seed phrase offline and never type it into a site.
- Use a separate wallet for experiments and airdrops.
- Review approvals monthly.
- Bookmark the sites you use instead of following links in messages.
Frequently asked questions
Can someone steal crypto with only my public address?
No. A public address can only be used to view balances. Theft requires your keys or a signature from you.
Should I revoke approvals even if nothing is missing?
Yes, revoking old unlimited approvals reduces future risk. It costs a small network fee per approval.
Can stolen crypto be recovered?
Rarely. Blockchain transactions are final, so prevention and fast action matter most.
Dust Sweeper is a non-custodial tool: it reads your public address and every swap or bridge is a transaction you review and sign yourself. It never needs your seed phrase.
SCAN YOUR WALLET