China Adds Domestic AI Chips to Government Procurement List as U.S. Considers Easing Nvidia Export Curbs 
Azul Airlines Wins Court Approval for $2 Billion Debt Restructuring and New Capital Raise 
JD.com Pledges 22 Billion Yuan Housing Support for Couriers as China’s Instant Retail Competition Heats Up 
Gulf Sovereign Funds Unite in Paramount–Skydance Bid for Warner Bros Discovery 
Westpac Director Peter Nash Avoids Major Investor Backlash Amid ASX Scrutiny 
Intel’s Testing of China-Linked Chipmaking Tools Raises U.S. National Security Concerns 
United Airlines Flight to Tokyo Returns to Dulles After Engine Failure During Takeoff 
ADB Approves $400 Million Loan to Boost Ease of Doing Business in the Philippines 
ANZ Faces Legal Battle as Former CEO Shayne Elliott Sues Over A$13.5 Million Bonus Dispute 
Nvidia Develops New Location-Verification Technology for AI Chips 
GameStop Misses Q3 Revenue Estimates as Digital Shift Pressures Growth 
SoftBank Shares Slide as Oracle’s AI Spending Plans Fuel Market Jitters 
SoftBank Eyes Switch Inc as It Pushes Deeper Into AI Data Center Expansion 
Rio Tinto Signs Interim Agreement With Yinhawangka Aboriginal Group Over Pilbara Mining Operations 
Moore Threads Stock Slides After Risk Warning Despite 600% Surge Since IPO 
SpaceX Insider Share Sale Values Company Near $800 Billion Amid IPO Speculation 
SpaceX Edges Toward Landmark IPO as Elon Musk Confirms Plans 
A recent scam on Telegram has been identified, enabling attackers to drain victims' crypto wallets without requiring confirmation for transactions, as reported by users and evidenced by blockchain data.
This scam targets tokens compliant with the ERC-2612 standard, allowing "gas-less" transfers or transfers without Ether (ETH) held in the wallet, ADVN revealed.
Despite not necessitating user approval for transactions, the scam involves tricking users into signing a message, raising concerns as more tokens adopt this standard.
Anonymous User Lost Over $600 Worth of Open Exchange Tokens
According to Cointelegraph, it received reports from a user who allegedly lost more than $600 worth of Open Exchange (OX) tokens after falling victim to a phishing scam on what appeared to be the official Telegram group for the token's developer, OPNX.
Upon joining the group, the user was prompted to connect their wallet to verify their identity, unwittingly providing access to their funds.
"The victim claimed that he never approved a single transaction from the page, yet his funds were stolen anyway," the report added.
In addition, the scam group replicated the Collab.Land Telegram verification system, utilizing a fake version to deceive users into connecting their wallets to malicious sites.
Blockchain data also revealed that the attacker exploited the "transferFrom" function on the OX token contract, an action typically authorized through a separate "approve" transaction by the owner, which was not evident in this case.
Cyberattacker Executed Permit Function on Token Contract
The attacker executed the "Permit" function on the token contract, setting themselves as the spender and the victim's account as the owner, ultimately draining the funds without the traditional approval process.
This exploit highlights a new feature of specific token contracts under the ERC-2612 standard, facilitating transactions without requiring ETH in the wallet.
However, scammers exploit this feature to deceive users into relinquishing their funds by signing messages granting attackers access.
"[It] can be used to change an account's ERC20 allowance (see IERC20.allowance) by presenting a message signed by the account. By not relying on IERC20.approve, the token holder account doesn't need to send a transaction, and thus is not required to hold Ether at all," Web3 developer OpenZeppelin claimed.
Photo: RDNE Stock Project/Pexels
