Signature Replay Auditor

A typed-data payload is technically legible and practically opaque, and that gap is what most signature-based drains rely on. This explains the consequences of each known type rather than reformatting the fields — unlimited permits, deadlines that never arrive, Permit2 grants that never show as a normal allowance. Flags a missing chainId, which makes one signature valid on every chain at once, and a missing verifyingContract, which binds it to nothing. Explains what a payload authorises; it cannot tell you whether the site asking is honest. A perfectly formed permit to a spender you do not recognise is exactly what a drain looks like, and exactly what a legitimate approval looks like too. The judgement stays yours — this makes it an informed one.