KuCoin DApp Exploit PoC
eth_requestAccounts
personal_sign
eth_sendTransaction
eth_sign (raw 32-byte digest)
signTypedData_v4 (EIP-2612 permit)
wallet_addEthereumChain (evil RPC)
wallet_watchAsset (fake token)
kc_callRPC
signRawTransaction (direct)
Probe Solana/Tron/TON/kcWallet
setAddress/setConfig (silent?)
wallet_switchEthereumChain (silent?)
solana.connect onlyIfTrusted
tronWeb auto-sign probe
Log: