There is no authorization and no gas fee. How come the assets in my wallet are gone after I click to confirm?
Recently, a large number of re-staking, staking, and airdrop users simply clicked a mediocre signature confirmation in the wallet. There was no Approve item, and no gas fee was paid, and the wallet assets were cleared... This is the infamous Permit phishing signature attack!
Usually, attackers imitate official Twitter, Telegram, email, Discord replies or private chats with users to lure users to click on phishing website links with Claim airdrops, pledges, refunds, and welfare activities, and then steal the user's authorized assets through the "Permit" signature in the wallet. This is an offline signature authorization standard that uses the EIP-2612, which allows users to approve without having to own Eth to pay for Gas fees. It can simplify the user's approval process and reduce the risk of errors or delays caused by manual approval processes, but it has also become a common method of phishing attacks.