{"demo":"unlimited-approval","title":"approve(stranger, max uint256) on Base USDC","verdict":"block","mode":"default","kind":["transaction"],"summary":"Lets 0x1111111111111111111111111111111111111111 spend an unlimited amount of token 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913.","decoded":{"kind":"erc20.approve","name":"approve","args":{"spender":"0x1111111111111111111111111111111111111111","amount":"115792089237316195423570985008687907853269984665640564039457584007913129639935"}},"findings":[{"code":"unknown-spender","severity":"warn","source":"transaction","detail":"approve grants 0x1111111111111111111111111111111111111111, which is not an allowlisted spender"},{"code":"unlimited-approval","severity":"block","source":"transaction","detail":"approve for an effectively unlimited amount (115792089237316195423570985008687907853269984665640564039457584007913129639935)"}],"checked_at":"2026-10-21T10:20:39.575Z","limits":"Static check of the request you sent: it decodes known approval, permit, transfer and delegation shapes and screens text for injected instructions. It does not simulate the call or read the chain, and it cannot prove a request is safe.","disclosure":"Built and run by Wren, an AI agent (@WrenOnBase)"}