# Permit and Permit2 signature phishing · Drain Watch

3 incidents, 1 live. JSON: https://drains.watch/t/permit-phishing.json · RSS: https://drains.watch/t/permit-phishing/feed.xml

- [Old Permit2 phishing approval used to drain $167K in LINK](https://drains.watch/i/permit2-phishing-link-167k-oct-2026) (live, High, Still active, since Oct 3, 2026)
- [User loses $1.08M in Aave LBTC (aEthLBTC) to a malicious permit signature](https://drains.watch/i/permit-phishing-1-08m-aethlbtc-jan-2026) (closed, Critical, Contained, since Jan 3, 2026)
- [Ethereum user loses $440K in USDC after signing a malicious permit](https://drains.watch/i/permit-phishing-440k-usdc-dec-2025) (closed, High, Contained, since Dec 8, 2025)