User Loses $316K USDC After Signing Malicious Permit2 Transaction, GoPlus Warns

Gate News message, April 15 — According to GoPlus Security, a user recently lost approximately $316,000 in USDC after signing a malicious Permit2 transaction. Permit2 is a token approval mechanism that, when exploited by phishing attackers, can grant unauthorized access to wallet funds.

GoPlus advised users to follow four key security practices: avoid clicking unfamiliar links, refrain from installing unverified software, do not sign transactions with unclear content, and never transfer funds to unverified addresses. The security firm also recommended installing the GoPlus Security extension to detect and block phishing attempts in real time.