GoPlus said a user was hit a second time after leaving a malicious Permit approval in place. According to the security firm, the user signed the approval 183 days ago, and phishing attackers used it to steal about $1,625 in USDC in the first incident. Because the approval was not revoked afterward, the same authorization was used again around two hours ago to drain about $75,780 in USDC.
GoPlus used the case to warn users about approval management and phishing exposure. The firm urged users not to click unknown links, install untrusted software, sign transactions they do not understand, or transfer funds to unverified addresses. It also advised granting approvals only when necessary, avoiding unlimited allowances, and using security browser extensions that can block phishing links and risky signatures in real time.
GoPlus said it detected a case in which a user was exploited again after failing to revoke a malicious Permit approval.
According to GoPlus, the user signed the malicious approval transaction 183 days ago. Phishing attackers then used that approval to move funds, resulting in the theft of about $1,625 in USDC.
Because the approval was never revoked, the attacker used the same authorization again around two hours ago and stole about $75,780 in USDC, GoPlus said.
GoPlus issues phishing and approval warning
GoPlus said users should follow four anti-phishing rules: do not click unknown links, do not install untrusted software, do not sign unknown transactions, and do not send funds to unverified addresses.
The firm also advised users to grant approvals only when needed, avoid unlimited allowances, and consider installing security extensions that can block phishing links and risky signatures in real time.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
