Revoke what can still move your tokens

On Solana a delegate approval is the one lingering permission a drain can leave behind: the approve instruction lets another address move up to an amount of a token until you revoke it. solcheck scans both token programs, the Token program and Token-2022, lists every non-zero delegate, and revokes the ones you pick. Your wallet signs, your keys never leave it, and nothing is stored.

Note: revoking clears a delegate, it cannot undo an ownership reassignment. If an attacker already took ownership of an account with SetAuthority or assign, that is not reversible on-chain. See the playbook.