Address Checksum & Revoke Tracker
Generate an EIP-55 checksummed Ethereum address to stop costly typos, then scan your ERC-20 token allowances across major chains and spot risky approvals to revoke. 100% in-browser — no upload, no backend, no private key.
Checksum generator & allowance scanner
eth_call — this tool never sends a transaction or asks for a private key.What is an EIP-55 checksum?
An Ethereum address is 20 bytes, normally shown as 40 hexadecimal characters after “0x”. EIP-55 keeps that length but sets each character to upper or lower case based on the Keccak-256 hash of the address. Because the pattern is deterministic, a single wrong character almost always breaks the checksum — so a wallet can warn you before you send to a mistyped address. Lowercase and uppercase addresses are still valid, but they carry no error detection.
A mixed-case address lets software verify the characters you typed. If you copy a lowercase address and one letter flips during a paste, nothing catches it. A checksummed address turns that silent error into a loud warning.
Take the Keccak-256 hash of the lowercase address; for each of the 40 hex characters, upper-case it when the matching hash nibble is 8 or higher, otherwise keep it lower. The result is the canonical EIP-55 string. This tool computes it locally with viem.
A valid checksum only proves the characters are internally consistent — it does not mean the address is a real person or a safe contract. Always confirm the destination in your own wallet before transferring.
Token allowances & why you should revoke
When you use a DEX, bridge or lending app, you “approve” a contract (the spender) to move a token from your wallet. That approval persists until you revoke it. Old allowances to contracts you no longer use are a common attack surface: if that contract is exploited, the spender can still drain the approved token. Periodically reviewing and revoking stale approvals is one of the highest-value wallet-hygiene habits.
The scanner above performs a read-only eth_call for each token’s allowance to the Uniswap Universal Router and Permit2. It never submits a transaction and never sees your key — it simply reports what is already on-chain.
This is a fast, sample check across the top tokens and two common spenders. For a complete, indexed view of every approval your address has ever granted, use a dedicated permission manager such as revoke.cash. Both are read-only; revoking itself costs gas.
Revoke an approval when you stop using a protocol, when a contract is deprecated, or when an audit flags a spender. Keeping only the allowances you actively need shrinks your blast radius if any approved contract is compromised.