Pendle

Bank

Arkham

Security

Read

<ul>
 <li>A user lost $11 million in a phishing attack due to signing multiple fraudulent Permit signatures.</li>
 <li>Permit signatures, enabled through EIP-2612, allow off-chain transaction authorization, posing significant security risks.</li>
 <li>Security firms highlight the need for caution with Permit signatures and recommend using security extensions for protection.</li>
</ul>
<p>In a recent incident, a user suffered a significant <a href="https://x.com/WuBlockchain/status/1804714455663857886" rel="noopener noreferrer nofollow">financial loss</a> due to a phishing attack. The user lost $11 million worth of aEthMKR and Pendle USDe tokens after signing multiple Permit phishing signatures. This event shows the growing risks associated with digital asset security.The victim, who is a <a href="https://cryptonewsland.com/makerdao-unveils-puredai-a-decentralized-stablecoin-shaking-up-the-future-of-finance/" rel="noopener noreferrer nofollow">MakerDAO governance delegate</a>, fell prey to the attack by unknowingly signing fraudulent Permit signatures.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"><img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f494.png" alt="💔" class="wp-smiley" style="height: 1em; max-height: 1em;"> 5 hours ago, a victim lost $11 million worth of aEthMKR and Pendle USDe tokens due to signing multiple Permit phishing signatures. <a href="https://t.co/9jhgQMdkl9" rel="noopener noreferrer nofollow">pic.twitter.com/9jhgQMdkl9</a></p>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) <a href="https://twitter.com/realScamSniffer/status/1804708942981091516?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">June 23, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<h3 class="wp-block-heading" id="h-permit-signature-risks"><strong>Permit Signature Risks</strong></h3>
<p>The incident highlights the <a href="https://cryptonewsland.com/binance-assists-btcturk-amid-cyber-attack-and-54m-avax-breach/" rel="noopener noreferrer nofollow">vulnerabilities associated</a> with Permit signatures, a feature enabled through EIP-2612. This feature allows users to authorize transactions without prior on-chain approval, which can be exploited by malicious actors. The risk is heightened because the signature authorization happens off-chain, making it challenging to detect compromised signatures.</p>
<h3 class="wp-block-heading" id="h-analysis-by-security-firms"><strong>Analysis by Security Firms</strong></h3>
<p>Arkham Intelligence and blockchain security firm SlowMist have both analyzed the incident. According to <a href="https://www.slowmist.com/#products" rel="noopener noreferrer nofollow">SlowMist</a>, Permit signatures pose significant risks as they can be easily exploited by bad actors. SlowMist noted that some wallets decode and display signature information to help users identify phishing attempts. However, there is often insufficient warning about the risks of Permit signature phishing.</p>
<h3 class="wp-block-heading" id="h-preventative-measures"><strong>Preventative Measures</strong></h3>
<p>Users are advised to exercise <a href="https://cryptonewsland.com/coinstats-temporarily-shuts-down-app-following-security-breach/" rel="noopener noreferrer nofollow">caution when interacting</a> with smart contracts and signing off-chain signatures. Installing security extensions, such as those recommended by Scam Sniffer, can enhance protection against phishing attacks. Additionally, users should verify the legitimacy of websites and smart contracts before signing any Permit signatures.</p>
<p>This incident is a reminder of the importance of security in the digital asset space. As the use of smart contracts and digital tokens continues to grow, users must remain vigilant and take necessary precautions to protect their assets from phishing attacks and other forms of cyber threats.</p>
<h4 class="wp-block-heading" id="h-read-also">Read also</h4>
<ul class="wp-block-yoast-seo-related-links">
 <li><a href="https://cryptonewsland.com/crypto-clients-scramble-as-signature-bank-deadline-looms/" rel="noopener noreferrer nofollow">Crypto Clients Scramble as Signature Bank Deadline Looms</a></li>
 <li><a href="https://cryptonewsland.com/signature-bank-halts-crypto-transactions-under-100000-binance/" rel="noopener noreferrer nofollow">Signature Bank Halts crypto transactions under $100,000: Binance</a></li>
 <li><a href="https://cryptonewsland.com/fdic-bans-crypto-support-by-failed-banks-signature-bank-crypto-partners-now-in-jeopardy/" rel="noopener noreferrer nofollow">FDIC Bans Crypto Support by Failed Banks: Signature Bank Crypto Partners Now in Jeopardy</a></li>
 <li><a href="https://cryptonewsland.com/vitalik-buterin-proposes-ethereum-pos-enhancement-for-efficiency/" rel="noopener noreferrer nofollow">Vitalik Buterin Proposes Ethereum PoS Enhancement for Efficiency</a></li>
 <li><a href="https://cryptonewsland.com/google-to-permit-bitcoin-etf-advertising-from-jan-2024/" rel="noopener noreferrer nofollow">Google to Permit Bitcoin ETF Advertising from Jan 2024</a></li>
</ul>
<p>The post <a href="https://cryptonewsland.com/11m-lost-in-permit-signature-scam-security-experts-urge-caution-with-off-chain-transactions/" rel="noopener noreferrer nofollow">$11M Lost in Permit Signature Scam: Security Experts Urge Caution with Off-Chain Transactions</a> appeared first on <a href="https://cryptonewsland.com" rel="noopener noreferrer nofollow">Crypto News Land</a>.</p>

$11M Lost in Permit Signature Scam: Security Experts Urge Caution with Off-Chain Transactions

Table of Contents

Crypto News Land

Other articles published on Jun 23, 2024

MoonBag Crypto Gains Global Approval, Surpassing BitBot And Avalanche

New Solana Memecoin Degen Black Pepe to Rally 17,000% in 48 Hours – Should You Buy?

Roles of TradFi and DeFi In The Economy, Details On Their Integration

Ripple News: XRP Ledger’s AMM TVL Jumps to $7.7 Million Amid Rapid Growth

Cardano Unveils New Upgrade to Enhance Staking Accessibility

Assessing how Solana’s ETF application can turn things around for SOL

Join our free newsletter for daily crypto updates!