SlowMist Cosine: The previous WETH phishing incident on Blast was caused by nferno Drainer supporting offline authorization signature

According to ChainCatcher, SlowMist Cosine posted on the X platform that a user was phished for WETH on Blast. There are several key pieces of information that need to be noted:

1. WETH on Blast is Blast's wrapped ETH token issued by Blast. The contract is upgradeable and supports permit offline authorization signature.
2. The WETH code on the Ethereum mainnet is only about 50 lines, which is very concise and reliable. The amount of ETH stored in the contract is equal to the amount of WETH issued, and there are no fancy functions such as permits.
3. Users were phished because Inferno Drainer supported Blast WETH permit offline authorization signature. The phishing gangs really studied the details, and the details determine the benefits.