PECTRA LETS HACKERS DRAIN WALLETS WITH JUST AN OFFCHAIN SIGNATURE

Summary from the TLDR Crypto newsletter

Ethereum developers are investigating an exploit vector introduced by the Pectra upgrade that allows wallets to be drained via malicious off-chain signatures. Users can unknowingly sign payloads later executed via permissive approvals. Core teams are now focused on improving signature UX and educating users on the risks of off-chain signing.