Salus Flags Revenue Family for Malicious Permit Draining Users’ USDG

The mechanics matter more than the branding: a single transaction combining permit signatures with transferFrom suggests a gas-efficient drainer that bypasses the usual two-step approval warning signs, which is a harder pattern for users to spot. The project's own response — claiming account takeover, pausing redemptions and disowning REV — is the familiar deflection playbook, and it leaves the actual custody question unanswered. Whether the paused redemptions resume, and whether any funds are traced or recovered, is the open question.