[Security Agency Salus: Revenue Involved in Malicious Authorization, Attackers Exploit Permit Signatures to Steal Assets] BlockBeats news, October 5, security agency Salus reported that Revenue is involved in malicious authorization. Attackers submitted users' permit signatures to obtain unlimited spending permissions for their USDG, then immediately invoked transferFrom. Authorization and fund transfer were completed in the same transaction, thereby draining users' wallets. The funds were subsequently split into two hacker addresses at a ratio of 20% and 80%. The report stated that this allocation structure resembles Inferno's drainer-as-a-service model, and its promotion method aligns with FomoPeek's scam strategy using KOLs. Public information indicates that Revenue provides an exit channel for X Money. Users can exchange funds for cryptocurrency or send cryptocurrency into X Money without requiring KYC. [Original Link]