Approvals and signatures
For the prompt sequence and the wallet-by-wallet experience, see Connect and deposit and Supported wallets. This page covers what each approval authorizes and how to revoke.
Why the per-vault approvals exist
Vault shares are minted directly to your wallet at deposit time. The Earn contract needs an allowance on each vault share token to:
- Preauthorize the vault set. Auto-Pilot only routes funds into vaults you've approved.
- Move you out of a vault later: when a better candidate wins the score, when a vault must be force-exited (hidden, or below your liquidity floor), and when you close.
The same allowance is how the rebalance fee is collected, in shares of the source vault. Without these allowances Earn cannot rebalance you.
Setup approves your starting vaults plus a next-rebalance candidate. Approving more vaults later gives Auto-Pilot more options; when a better vault is blocked only by a missing approval, the strategy page shows an Approve button and can notify you.
Revoking
Manage approvals on the Vaults page inside Earn, which supports bulk approve and revoke (revoking a vault held by an active strategy is blocked until that strategy closes). revoke.cash works too.
- Revoking the USDC allowance stops Earn from pulling your next deposit. Funds already inside vaults are not affected.
- Revoking a vault share allowance blocks rebalances into and out of that vault. Closing still works: the close flow prompts you to re-approve any missing allowance first.
Signatures
Beyond the on-chain approvals, every management action (create, edit settings, pause/resume, hide a vault) prompts a one-off off-chain signature. Each authorizes only that single request and can never move funds. It expires within minutes for regular wallets; Safes get a 24-hour window so co-signers have time to approve.