Ice Phishing Scams

This report explains "ice phishing," a Web3-specific scam in which attackers trick users into approving token allowances (instead of stealing private keys), then use on-chain TransferFrom transactions to drain tokens/NFTs; it includes transaction examples, suspicious address indicators, common lures (fake dApps and social posts), and mitigation steps such as checking approvals on Etherscan/Debank and revoking permissions via revoke.cash.