Approval Phishing: How the Token Approval Exploit Actually Works
A mechanism-level walkthrough of ERC-20 and ERC-721 approvals, how Permit and Permit2 signatures moved the attack off chain, and why blind signing sits at the centre of it. Includes measured loss figures with their sources and limits, plus which defences hold up and which do not.