TokenPocketWhat is Permit2? - The model, advantages, and Possible risks.
About Permit2Uniswap has just released a new token approval standard, Permit2, which differs from the traditional ERC20 and EIP-2612. Permit2 allows users to avoid the need for a chain-level “approve” operation before interacting with different DApps, allowing the DApp protocol to first acquire your token approval. According to the description, the new Permit2 protocol has the advantages of saving gas, allowing for batch operations of approval/transfers and being more flexible than traditiona...
TokenPocketCreate/Import MultiSig wallet on TokenPocket Browser Extension!
About MultiSig wallet:Corresponding to the multi-signature wallet is the single-signature wallet. If we want to conduct a transfer operation on the blockchain, we need to generate a signature with the wallet. We sign and send the transaction out. This is the way for a typical single-signature wallet and it is also for our usual wallet. A multi-signature wallet, as the name suggests, is a wallet that requires multiple people to sign in to perform an operation. Transferring with a multi-signatu...
TokenPocketWhat is TRON Multi-Signature wallet?
“Hey, I have the 12 Secret Recovery Phrases, but I don’t know how to get TRX. Can you please help me to withdraw 10k USDT and then I will give you 5k USDT? ” “Here are my phrases: THIS IS DEFINITELY THE TRON MULTI SIGNATURE SCAM DO NOT BELIEVE IT.” So, maybe you are interested in these phrases and you are trying to import them into your TokenPocket APP, right? LOL! Please be aware of this TRON Multi-Signature SCAM!What’s the difference between a single-signature wallet and a multi-signature w...
TokenPocket is the world's leading multi-chain self-custodial wallet, which supports most mainstream public chains.
As we all know, Malicious Approval is to approve some amount of tokens to be invoked by the contract, but most of the malicious approvals will invoke all your token balance.
But, is it possible to invoke the assets of a normal wallet address that didn’t approve before? Recently, many users found out there is a “0 USDT” transaction history appearing in the wallet. For example,
The first time you saw this transaction, you might think you were struggling with the risk of risky approval, then you might check on the blockchain explorer.
However, only “Cancelled” is shown on the blockchain explorer.
And you can’t find any approval history in the Approval Change History.
So, what’s going on? Let me explain further. Take TRONSCAN as an example, find the USDT contract address, and click [Contract] — [Write Contract] — [8. transferfrom].
You can enter [_from_address], [to_address], and the [_value], then click [Send]. [true] means the operation is successful. This is a simple invoke operation, which will cause your wallet [Approval] to add a history that shows “Cancelled” and also, through this invokes, it will cause “0 USDT” transfer history to appear in your wallet.
Scammers want to trick you into copying the wrong address during the transfer process, which can lead to the loss of assets. Be aware of the phishing address!
1. Why my asset can be invoked?
This operation is performed directly through the TransferFrom function of the USDT, any address can be invoked and generate a transfer record in the wallet and a “Cancelled” record in the Approvals. By the way, please note that this situation may occur in all public chains including EVM-based chains, TRON, etc.
2. Are my assets still safe?
The purpose of this operation is to simulate the transaction from the user’s address, combined with the disguised address to induce the user to misoperate the transfer, it won’t affect your asset's security, but please be aware of this possible misoperation execution.
TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.
As we all know, Malicious Approval is to approve some amount of tokens to be invoked by the contract, but most of the malicious approvals will invoke all your token balance.
But, is it possible to invoke the assets of a normal wallet address that didn’t approve before? Recently, many users found out there is a “0 USDT” transaction history appearing in the wallet. For example,
The first time you saw this transaction, you might think you were struggling with the risk of risky approval, then you might check on the blockchain explorer.
However, only “Cancelled” is shown on the blockchain explorer.
And you can’t find any approval history in the Approval Change History.
So, what’s going on? Let me explain further. Take TRONSCAN as an example, find the USDT contract address, and click [Contract] — [Write Contract] — [8. transferfrom].
You can enter [_from_address], [to_address], and the [_value], then click [Send]. [true] means the operation is successful. This is a simple invoke operation, which will cause your wallet [Approval] to add a history that shows “Cancelled” and also, through this invokes, it will cause “0 USDT” transfer history to appear in your wallet.
Scammers want to trick you into copying the wrong address during the transfer process, which can lead to the loss of assets. Be aware of the phishing address!
1. Why my asset can be invoked?
This operation is performed directly through the TransferFrom function of the USDT, any address can be invoked and generate a transfer record in the wallet and a “Cancelled” record in the Approvals. By the way, please note that this situation may occur in all public chains including EVM-based chains, TRON, etc.
2. Are my assets still safe?
The purpose of this operation is to simulate the transaction from the user’s address, combined with the disguised address to induce the user to misoperate the transfer, it won’t affect your asset's security, but please be aware of this possible misoperation execution.
TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.
TokenPocketWhat is Permit2? - The model, advantages, and Possible risks.
About Permit2Uniswap has just released a new token approval standard, Permit2, which differs from the traditional ERC20 and EIP-2612. Permit2 allows users to avoid the need for a chain-level “approve” operation before interacting with different DApps, allowing the DApp protocol to first acquire your token approval. According to the description, the new Permit2 protocol has the advantages of saving gas, allowing for batch operations of approval/transfers and being more flexible than traditiona...
TokenPocketCreate/Import MultiSig wallet on TokenPocket Browser Extension!
About MultiSig wallet:Corresponding to the multi-signature wallet is the single-signature wallet. If we want to conduct a transfer operation on the blockchain, we need to generate a signature with the wallet. We sign and send the transaction out. This is the way for a typical single-signature wallet and it is also for our usual wallet. A multi-signature wallet, as the name suggests, is a wallet that requires multiple people to sign in to perform an operation. Transferring with a multi-signatu...
TokenPocketWhat is TRON Multi-Signature wallet?
“Hey, I have the 12 Secret Recovery Phrases, but I don’t know how to get TRX. Can you please help me to withdraw 10k USDT and then I will give you 5k USDT? ” “Here are my phrases: THIS IS DEFINITELY THE TRON MULTI SIGNATURE SCAM DO NOT BELIEVE IT.” So, maybe you are interested in these phrases and you are trying to import them into your TokenPocket APP, right? LOL! Please be aware of this TRON Multi-Signature SCAM!What’s the difference between a single-signature wallet and a multi-signature w...
Share Dialog
Share Dialog
TokenPocket is the world's leading multi-chain self-custodial wallet, which supports most mainstream public chains.
Subscribe to TokenPocket
Subscribe to TokenPocket
<100 subscribers
<100 subscribers
No activity yet