Betrugsmaschen

Permit phishing

An offchain signature authorises a token allowance without an immediate gas payment.

Reference note · Sources below

Rechercheartikel und Referenzeinträge erscheinen auf Englisch. Die Navigation ist in sieben Sprachen verfügbar.

In diesem Artikel

Overview

An offchain signature authorises a token allowance without an immediate gas payment.

The signature can be submitted later while the victim believes nothing happened.

Decode domain, token, spender, amount, nonce and deadline.

Betrugsmaschen

A wallet displays opaque bytes and asks the user to trust the connected page.

Betrugsmaschen

A hostile application asks for access through a real identity-provider screen.

Wallets und Sicherheit

The time limit governs submission of the signature, not necessarily the life of the resulting approval.

Wallets und Sicherheit

Review the token's allowance to Permit2 and the spender authority granted through Permit2.