According to the representatives of the Core Working Group at Solana, attackers have started using the built-in extension to steal crypto assets from Solana’s wallets. Slorg said that this situation occurred with one of the crypto investors whose assets burned down minutes after they were purchased. This was made possible by the extension of Permanent Delegate, which is an additional feature of the Solana Token 2022 standard.
The official website of Solana describes the Permanent Delegate extension as a function that gives "unlimited delegation privileges over all token records, allowing them to burn or translate tokens without restrictions". Extension is designed to automatically return the translated token.
Slorg says that there are several reasons for fraudsters to use the Permanent Delegate. For example, to manipulate the value of burned tokens and make a profit from it.