跳到主要内容
Before a DEX can move your tokens, you sign an approval.
Most people sign once and never think about it again.
That approval stays live.
If the contract turns out to be malicious, or gets exploited later, it can still pull those tokens.
Check your approvals now and then.