Sanrio Shares Plunge as Q1 Profit Miss Overshadows Strong Sales 
Super Micro Stock Jumps 19% as AI Server Demand Drives Strong 2027 Outlook 
Austal Shares Surge 16% as Hanwha Offers Up to $1.2 Billion for U.S. Shipbuilding Business 
Thyssenkrupp Raises 2026 Profit Outlook as Steel and Materials Units Strengthen 
China Automakers Accelerate Global Expansion as Domestic Car Sales Slump 
SMIC Shares Rally as Q2 Profit Surges 262% on Strong Chip Demand 
Aviva First-Half Operating Profit Jumps 24% as Direct Line Deal Boosts Growth 
Paramount Weighs CNN Sale as $110B Warner Bros. Discovery Deal Faces Antitrust Fight 
Bill Ackman’s Pershing Square Returns to Netflix With Major New Stake 
Ford to Move Some Lincoln Production From China to U.S. in 2030 
Lenovo Revenue Surges 43% as AI Demand Drives Record First-Quarter Growth 
Google Pushes Gemini AI Overhaul as Sergey Brin Targets Model Supremacy 
Pandora Shares Rise as Q2 Results Beat Forecasts, 2026 Outlook Raised 
CBA Posts Record A$10.98B Profit Despite Cautious Outlook 
Apple Develops China-Specific AI Model With Alibaba as Apple Intelligence Launch Nears 
Goldman Sachs Eyes Investors for Nvidia’s $500 Billion AI Financing Plan 
ANZ Home Loan Applications Drop 12% After Australia Property Tax Changes 
Add as a preferred source on Google
A recent scam on Telegram has been identified, enabling attackers to drain victims' crypto wallets without requiring confirmation for transactions, as reported by users and evidenced by blockchain data.
This scam targets tokens compliant with the ERC-2612 standard, allowing "gas-less" transfers or transfers without Ether (ETH) held in the wallet, ADVN revealed.
Despite not necessitating user approval for transactions, the scam involves tricking users into signing a message, raising concerns as more tokens adopt this standard.
Anonymous User Lost Over $600 Worth of Open Exchange Tokens
According to Cointelegraph, it received reports from a user who allegedly lost more than $600 worth of Open Exchange (OX) tokens after falling victim to a phishing scam on what appeared to be the official Telegram group for the token's developer, OPNX.
Upon joining the group, the user was prompted to connect their wallet to verify their identity, unwittingly providing access to their funds.
"The victim claimed that he never approved a single transaction from the page, yet his funds were stolen anyway," the report added.
In addition, the scam group replicated the Collab.Land Telegram verification system, utilizing a fake version to deceive users into connecting their wallets to malicious sites.
Blockchain data also revealed that the attacker exploited the "transferFrom" function on the OX token contract, an action typically authorized through a separate "approve" transaction by the owner, which was not evident in this case.
Cyberattacker Executed Permit Function on Token Contract
The attacker executed the "Permit" function on the token contract, setting themselves as the spender and the victim's account as the owner, ultimately draining the funds without the traditional approval process.
This exploit highlights a new feature of specific token contracts under the ERC-2612 standard, facilitating transactions without requiring ETH in the wallet.
However, scammers exploit this feature to deceive users into relinquishing their funds by signing messages granting attackers access.
"[It] can be used to change an account's ERC20 allowance (see IERC20.allowance) by presenting a message signed by the account. By not relying on IERC20.approve, the token holder account doesn't need to send a transaction, and thus is not required to hold Ether at all," Web3 developer OpenZeppelin claimed.
Photo: RDNE Stock Project/Pexels
