Aave, a popular decentralized finance (DeFi) platform, has recently seen a shocking phishing scam. As per the data from ScamSniffer, a user from Aave has reportedly incurred a loss of $343,389 in $aEthWETH due to unintentionally signing a suspicious phishing signature. As the Web3 anti-scam platform mentioned on social media, the incident took place eleven hours back. As a result of this, the DeFi community is again witnessing calls for more cautiousness and vigilance.
11 hrs ago, an Aave user lost $343,389 worth of aEthWETH after signing a malicious "permit" phishing signature. pic.twitter.com/Og097nUtrj
— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) August 10, 2025
Scammer Tricks Aave User into Authorizing Phishing Signature
ScamSniffer’s report has disclosed that by unknowingly signing a malicious phishing signature, the Aave user has ultimately lost approximately $343,389 in $aEthWETH. The exploiter reportedly executed the attack via fraudulent signature requests, tricking the victim into permitting unauthorized transactions. This permitted the attacker to take away the above-mentioned amount from the victim’s wallet, “0x8f4…b64d7.”
The incident took into account 2 transactions including $aEthWETH. These two notable amounts were 65.83 $aEthWETH (nearly $274,959.45) and 16.45 $aEthWETH ($68,739.86). The respective funds were shifted from the wallet of the victim, amounting to the aforementioned total.
Web3 Users Advised to Move With Caution to Avoid Phishing Scams
According to ScamSniffer, this incident indicates the requirement for vigilance on the part of the users while signing approvals. In this respect, they are advised to double-check each signature prompt and avoid hurried decisions when making transfers. Overall, amid the continued Web3 adoption, scam threats are also evolving, raising the need for extra caution.