Recently, the problem of multi-signature in Tron wallet has begun to increase. Tron's multi-signature is a mechanism "inherited" from EOS. It distinguishes between owner and active permissions, and subdivides the threshold and weight. Many users have the need to use TRC20 recharges such as receiving codes, adding fans, buying cards, etc., so the scammers took advantage of this "window" to change from the original malicious authorization scam to the current malicious code to change permission settings. Malicious changes in permissions can have the management rights of all assets in your wallet, which is more harmful than malicious authorization, so you have to guard against it. In TokenPocket, before executing similar malicious code, a risk warning will pop up. You only need to carefully check the prompts of the ongoing operation, such as: changing permissions, then you should close it immediately.