# Scam Sniffer · Drain Watch

5 incidents, 1 live. JSON: https://drains.watch/t/scam-sniffer.json · RSS: https://drains.watch/t/scam-sniffer/feed.xml

- [Old Permit2 phishing approval used to drain $167K in LINK](https://drains.watch/i/permit2-phishing-link-167k-oct-2026) (live, High, Still active, since Oct 3, 2026)
- [Ethereum user loses 999,999 USDT after signing a phishing token approval](https://drains.watch/i/usdt-approval-phishing-999999-jul-2026) (closed, High, Still active, since Jul 8, 2026)
- [Investor sends 4,556 ETH ($12.25M) to a poisoned lookalike address planted months earlier](https://drains.watch/i/address-poisoning-4556-eth-jan-2026) (closed, Critical, Still active, since Jan 30, 2026)
- [User loses $1.08M in Aave LBTC (aEthLBTC) to a malicious permit signature](https://drains.watch/i/permit-phishing-1-08m-aethlbtc-jan-2026) (closed, Critical, Contained, since Jan 3, 2026)
- [Ethereum user loses $440K in USDC after signing a malicious permit](https://drains.watch/i/permit-phishing-440k-usdc-dec-2025) (closed, High, Contained, since Dec 8, 2025)