Signature phishing tricks users into signing a permit that gives the attacker full access to their tokens.

The rise of EIP-712 made signatures more readable, but signature phishing remains a top threat for NFT and DeFi users.