A PEPE holder lost $1.39 million in a phishing scam that exploited Uniswap’s Permit2 feature. The scam involved the user unknowingly signing an off-chain Permit2 transaction, granting the attacker unrestricted access to their wallet. According to ScamSniffer, this allowed the scammers to drain the wallet quickly. Additionally, SlowMist reported a sharp rise in phishing attacks, particularly involving 'permit' phishing signatures, leading to almost ~$40 million in losses this week. Another incident involved Aave sDAI on Ethereum, where $2.4 million was lost due to a malicious permit signature.