ETHSecurity Community

let's say that you are building a contract with the following properties:
- never holds funds. all tokens are spent/sent back within the same tx.
- interacts with aave pool (for flashloans)+ uniswap router

as a dev, would you feel comfortable granting infinite approval to the aave/uni dependencies? why?

eager to know what security-minded devs think about this one 🤔

Talks about crypto and coffee. Building on-chain algo trading - check out my channels /algo-trading and /python

Aspiring crypto dev.

0xrusowsky.github.io/blog/

I agree with what @moo said. I don't think there is any reason for infinite approvals.