Types d’arnaques

Permit phishing

An offchain signature authorises a token allowance without an immediate gas payment.

Reference note · Sources below

Les enquêtes et les fiches de référence sont publiées en anglais. La navigation est disponible en sept langues.

Dans cet article

Overview

An offchain signature authorises a token allowance without an immediate gas payment.

The signature can be submitted later while the victim believes nothing happened.

Decode domain, token, spender, amount, nonce and deadline.

Types d’arnaques

A wallet displays opaque bytes and asks the user to trust the connected page.

Types d’arnaques

A hostile application asks for access through a real identity-provider screen.

Portefeuilles et sécurité

The time limit governs submission of the signature, not necessarily the life of the resulting approval.

Portefeuilles et sécurité

Review the token's allowance to Permit2 and the spender authority granted through Permit2.