A MakerDAO governance delegate has fallen prey to a sophisticated phishing scam, resulting in a staggering loss of over $11 million in aEthMKR and Pendle USDe tokens. The incident was first detected by Scam Sniffer and later confirmed by Arkham Intelligence. The delegate reportedly signed multiple Permit phishing signatures, which led to the significant loss.

The Permit feature, enabled through EIP-2612, allows for the generation of authorization signatures without the need for on-chain transactions. While this feature offers convenience, it also poses a significant risk. Potential victims can sign permits for malicious websites without broadcasting them to the blockchain, making it challenging to determine whether a signature has been compromised.

Blockchain security firm SlowMist has highlighted the risks associated with Permit signatures, noting that bad actors can deceive victims into providing signatures by posing as legitimate websites. The firm emphasizes the need for increased security measures, as the lack of sufficient warnings regarding permit signature phishing poses higher risks to users.

This incident serves as a stark reminder of the potential risks associated with Permit signatures and the importance of implementing robust security measures. The delegate's loss of over $11 million underscores the need for vigilance and caution when interacting with smart contracts.

In conclusion, the MakerDAO governance delegate's loss of over $11 million to a Permit phishing scam highlights the importance of prioritizing security in the blockchain ecosystem. As the use of Permit signatures continues to grow, it is essential for users to remain aware of the potential risks and take necessary precautions to protect their assets.