On August 18, 2025, someone signed an approval. On October 3, 2026, 12,041 $LINK left that wallet
Not a fresh phishing scam—an old one. Scam Sniffer estimates the loss at $167,342
The Permit2 approval was set to the maximum amount with no expiration. For over a year, it just sat there—the door was open the whole time
One revoke, and this story never would have happened
GoPlus also showed another case: around $305,000 in DAI went to a lookalike address copied from the transaction history
What to take away:
- An approval with no expiration doesn't expire on its own
- On revoke.cash, look for approvals with the maximum amount and no expiration
- Permit2 has two layers of approvals—revoke both
- Get the address from the original source, not the transaction history
Have you checked your approvals this year, or is that also “sometime later”?)
#Permit2 #ScamAlert #LINK #Web3Security
Not a fresh phishing scam—an old one. Scam Sniffer estimates the loss at $167,342
The Permit2 approval was set to the maximum amount with no expiration. For over a year, it just sat there—the door was open the whole time
One revoke, and this story never would have happened
GoPlus also showed another case: around $305,000 in DAI went to a lookalike address copied from the transaction history
What to take away:
- An approval with no expiration doesn't expire on its own
- On revoke.cash, look for approvals with the maximum amount and no expiration
- Permit2 has two layers of approvals—revoke both
- Get the address from the original source, not the transaction history
Have you checked your approvals this year, or is that also “sometime later”?)
#Permit2 #ScamAlert #LINK #Web3Security
