On January 1, Reddit user 4cademy offered to advise the community of cryptocurrency users in the r/CryptoCurrency forum, stating that they had authorized a large number of smart contracts during the previous two years and decided it was time to review the authorized smart contracts.
They discovered that almost all of their permissions were for unlimited quantities, which prompted them to withdraw approvals for every smart contract in their wallet because it was better to be safe than sorry, and they gave the advice that, at the very least, individuals should review the permissions and possibly cancel them.
The user explained that doing this is necessary because certain users of nonfungible tokens (NFTs) or decentralized finance (DeFi) protocols may have unintentionally authorized hostile smart contracts from phishing scams that are waiting to steal user cash.
These types of ice phishing schemes have been effective in the past; one particularly complex month-long hoax featuring a proposal from a fictitious film company resulted in the theft of 14 Bored Ape Yacht Club (BAYC) NFTs from one wallet. Even "good-behaving" contracts that are well-known should be terminated since hackers may discover ways to steal money from associated wallets. In 2022, the top 10 exploits resulted in the theft of $2.1 billion, primarily through DeFi protocols and cross-chain bridges where hackers used flaws in already-existing smart contracts as cover.