How do I revoke token approvals?

Go to Settings > Security > Token Approvals. This tool allows you to see which dApps have permission to spend your tokens and revoke them to prevent "Drainer" attacks.