Stage 3 · Using Arc · Lesson 13
Dapps, and connecting to them safely
What a dapp actually is, what connect wallet really grants (less than you fear), what signatures grant (more than you think), and the approval hygiene that keeps you safe.
A dapp — decentralised app — is a website that talks to the blockchain: Uniswap and Aave, both live on Arc, token tools, dashboards. The site is just an interface; the real logic lives in contracts on-chain. Using them requires connecting your wallet, which is where beginners either freeze or click too fast. Here is the precise map of what you are granting, because it is the difference between safe and drained.
Connect wallet grants almost nothing
It tells the site your address — which is public anyway — so it can display your balances and prepare transactions for you to approve. Connecting to a site cannot take your funds. The fear of the connect button is misplaced.
Signatures and approvals are where the power is
After connecting, actions require your wallet's confirmation, and these come in flavours worth distinguishing. A transaction does one thing and shows it: send this, swap that. An approval is different — it grants a contract standing permission to move a token from your wallet, and an unlimited approval means exactly that, forever, until revoked. Legitimate dapps need approvals to function; drainer sites disguise theft as routine approvals, which is the pattern that actually empties wallets.
The hygiene that makes dapps safe in practice
- Reach dapps by typed or bookmarked URL, never ads or DM links. Fake front-ends of real dapps are the standard trap.
- Read what the wallet says before confirming, and if a login wants a token approval, leave.
- Prefer exact-amount approvals over unlimited when the interface offers the choice.
- Use your spending wallet, not your savings, for new dapps.
- Periodically review and revoke old approvals. Revoking costs a fraction of a cent on Arc — hygiene is effectively free here, so actually do it.
One Arc-specific note: the ecosystem at launch is unusually institutional — Uniswap, Aave, Morpho, Aerodrome and company arrived with Circle's cohort. That raises the floor, but every real dapp still has fake clones, and clones are a URL problem, not a contract problem. The bookmark habit is the defence.
