permit2

On August 18, 2025, someone signed an approval. On October 3, 2026, 12,041 $LINK left that wallet

Not a fresh phishing scam—an old one. Scam Sniffer estimates the loss at $167,342

The Permit2 approval was set to the maximum amount with no expiration. For over a year, it just sat there—the door was open the whole time

One revoke, and this story never would have happened

GoPlus also showed another case: around $305,000 in DAI went to a lookalike address copied from the transaction history

What to take away:
- An approval with no expiration doesn't expire on its own
- On revoke.cash, look for approvals with the maximum amount and no expiration
- Permit2 has two layers of approvals—revoke both
- Get the address from the original source, not the transaction history

Have you checked your approvals this year, or is that also “sometime later”?)

#Permit2 #ScamAlert #LINK #Web3Security