I’m often asked: If I’m just signing something and it doesn’t cost any gas, how can my assets still be stolen?
Here’s how I usually answer: Phishing sites often set the authorized amount to the maximum and the expiration date far in the future. Once you sign, you’ve effectively handed over control of those tokens. Many people think a signature that costs no gas can’t affect their assets, and that’s exactly the misconception that off-chain authorization phishing exploits.
$ETH 2245.15（-7.33%）
What other topics would you like to learn about? Leave a comment.
#ETH
Here’s how I usually answer: Phishing sites often set the authorized amount to the maximum and the expiration date far in the future. Once you sign, you’ve effectively handed over control of those tokens. Many people think a signature that costs no gas can’t affect their assets, and that’s exactly the misconception that off-chain authorization phishing exploits.
$ETH 2245.15（-7.33%）
What other topics would you like to learn about? Leave a comment.
#ETH
