Runbook: Weekly Wallet Security Review Workflow

Purpose

This runbook defines a weekly wallet security review that can be executed in under 45 minutes for small teams.

Inputs

• Wallet inventory by environment (prod, staging, personal test)
• Allowance export by chain
• Last 7 days transaction log
• Approved spender allowlist

Step 1: Approvals Delta Review (15 min)

1. Export current approvals for all operational wallets
2. Diff against last week's snapshot
3. Flag:

- new unlimited approvals - approvals to unknown spenders - stale approvals with no recent usage

Step 2: Signer Hygiene Check (10 min)

• Verify signer devices are patched and browser profiles are isolated
• Confirm no unknown extensions are active in signing profiles
• Review whether any signer accessed production flows outside bookmark policy

Step 3: Transaction Spot Audit (10 min)

Review random high-value transactions:

• destination address validity
• calldata intent vs expected action
• signer identity and approval chain

Step 4: Escalation Decision (5 min)

Escalate immediately if any of the following are present:

• unknown spender with unlimited approval
• suspicious signature prompt report
• unexpected approval spike on any wallet

Step 5: Documentation and Follow-Up (5 min)

• Record findings and actions in weekly log
• Assign owners for unresolved flags
• Set due dates for revocations and policy fixes

Example Weekly Output

Item	Count
New approvals reviewed	12
High-risk flags	3
Revocations executed	5
Open follow-ups	2

Screenshot and Audit Attachments Template

• approvals-delta-weekly.png
• signer-hygiene-checklist.png
• transaction-spot-audit-notes.png

Recommended Log Format

week: 2026-W08
reviewer: wallet-ops-oncall
high_risk_flags: 3
revocations_completed: 5
next_actions: ["label new spender owners", "rotate one signer profile"]

Operating Tips

• Keep the checklist short and non-negotiable
• Rotate reviewer every 2-3 weeks to reduce blind spots
• Track trend lines, not only one-time incidents

Conclusion

A lightweight, consistent weekly review catches the majority of wallet hygiene issues before they become incidents. Repetition is the control mechanism.