GoPlus says user lost another $75,780 after failing to revoke a malicious approval
GoPlus said a user was hit a second time after leaving a malicious Permit approval in place. According to the security firm, the user signed the approval 183 days ago, and phishing attackers used it to steal about $1,625 in USDC in the first incident. Because the approval was not revoked afterward, the same authorization was used again around two hours ago to drain about $75,780 in USDC. GoPlus used the case to warn users about approval management and phishing exposure. The firm urged users not to click unknown links, install untrusted software, sign transactions they do not understand, or transfer funds to unverified addresses. It also advised granting approvals only when necessary, avoiding unlimited allowances, and using security browser extensions that can block phishing links and risky signatures in real time.
