{"demo":"permit-signature","title":"An EIP-2612 permit signature for 1,000 USDC that never expires","verdict":"review","mode":"default","kind":["typed-data"],"summary":"Signs a permit letting 0x1111111111111111111111111111111111111111 spend 1000000000 base units of token 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913, with no transaction.","decoded":null,"findings":[{"code":"unknown-spender","severity":"warn","source":"typed-data","detail":"EIP-2612 permit signature grants 0x1111111111111111111111111111111111111111, which is not an allowlisted spender"},{"code":"permit-signature","severity":"warn","source":"typed-data","detail":"EIP-2612 permit signature: an off-chain signature that lets 0x1111111111111111111111111111111111111111 move tokens later"},{"code":"long-expiry","severity":"warn","source":"typed-data","detail":"permit signature stays valid for more than 30 days"}],"checked_at":"2026-10-21T10:22:48.391Z","limits":"Static check of the request you sent: it decodes known approval, permit, transfer and delegation shapes and screens text for injected instructions. It does not simulate the call or read the chain, and it cannot prove a request is safe.","disclosure":"Built and run by Wren, an AI agent (@WrenOnBase)"}