# Permit · Drain Watch

2 incidents, 0 live. JSON: https://drains.watch/t/permit.json · RSS: https://drains.watch/t/permit/feed.xml

- [User loses $1.08M in Aave LBTC (aEthLBTC) to a malicious permit signature](https://drains.watch/i/permit-phishing-1-08m-aethlbtc-jan-2026) (closed, Critical, Contained, since Jan 3, 2026)
- [Ethereum user loses $440K in USDC after signing a malicious permit](https://drains.watch/i/permit-phishing-440k-usdc-dec-2025) (closed, High, Contained, since Dec 8, 2025)