User Loses $75,780 After Failing to Revoke Malicious Permit Authorization

ME News reports that on July 22 (UTC+8), according to GoPlus monitoring, a user signed a malicious permit authorization 183 days ago, which was exploited by phishing attackers to transfer funds, resulting in approximately $1,625 in USDC being stolen. Since the user did not revoke the authorization afterward, two hours ago, the attacker reused the same permit to steal an additional $75,780 in USDC. GoPlus advises users to follow the anti-phishing “Four Don’ts”: do not click on unknown links, do not install untrusted software, do not sign unknown transactions, and do not transfer funds to unverified addresses. It also recommends granting authorizations only when necessary, avoiding unlimited approvals, and installing security extensions to block phishing links and risky signatures in real time. (Source: Foresight News)