Phishing dApp Approvals
A popup asking you to "connect" or "sign" looks routine — until the signature you approved quietly hands a stranger control over your account.
What the request actually asks for
Connecting a wallet to a dApp is usually harmless on its own. The danger is in the next step: a signature request that, buried in technical parameters most people never read, is actually an AccountPermissionUpdate call — reassigning your Owner or Active permission to the attacker's key.
Why it's easy to miss
Wallet apps show a signing prompt, but not always a plain-language explanation of what the transaction does. A request dressed up as a "claim," "mint," or "verify" action can carry a completely different payload underneath.
How to stay safe
Only connect to dApps you trust, and pause before signing anything you don't fully understand — especially from a link you reached through a DM, ad, or unfamiliar site. If your wallet flags a permission change, that's a moment to stop, not to proceed automatically.