An off-chain signed message that grants a token allowance without an on-chain approval transaction, defined by EIP-2612 and similar schemes.
Why it matters
Because no transaction is broadcast, a permit costs nothing and produces no on-chain record at the moment of signing — so it will not appear in a standard approvals review. A signature request that looks harmless can carry the same authority as an approval.
What you can check
A permit is a signature, not a transaction, so it does not appear in your transaction history and costs no gas. That is precisely why it is worth reading what a signing prompt actually says before approving it — an off-chain signature can grant the same allowance an on-chain approval would.
Where it showed up
Records in the Incident Tracker that turn on this: BadgerDAO front-end injection.
Not advice. Definitions are for understanding, not instruction. Nothing here is financial, legal, tax or security advice.