Slow Fog Cosine: The previous phishing incident involving WETH on Blast was due to nferno Drainer supporting offline authorization signatures
ChainCatcher message, Slow Mist Yu Xian posted on platform X stating that there are several key pieces of information to note regarding a phishing incident involving a user's WETH on Blast:The WETH on Blast is Blast's wrapped ETH token issued by Blast, the contract is upgradeable and supports permit offline authorization signatures;The WETH code on the Ethereum mainnet is also about 50 lines, very simple and reliable, for every WETH issued, there is an equivalent amount of ETH stored in the contract, without the flashy features like permit;The user was phished because Inferno Drainer supported the Blast WETH permit offline authorization signature, the phishing gang really studied the details, and details determine the profits.