ScamSniffer: $1.08M aEthLBTC stolen via malicious permit on January 3, 2026

On January 3, ScamSniffer reported a phishing theft involving a malicious "permit" signature that drained roughly $1.08 million in aEthLBTC from a crypto user. The attackers allegedly had the victim sign via a phishing site or cloned dApp, then swiftly converted the assets to ETH and routed funds through Tornado Cash. SlowMist's founder Cosine noted the group is not among mainstream drainers.