An attacker using the <button class="define-target" id="permit-phishing">permit phishing</button> technique stole $1.39&nbsp;million in tokens from an unsuspecting holder. The victim unknowingly signed a "Permit2" signature — a function intended to make crypto transactions smoother and less expensive, but one that also makes it possible for malicious actors to completely drain crypto wallets.<p>The attacker stole around $1.1&nbsp;million of the cartoon frog-themed PEPE tokens, and another roughly $50,000 of the also cartoon frog-themed APU token.</p>

Archived tweet

Tweet by Scam Sniffer:

Tweet #1

Image #1:

Image #2: