ERC-2612 tokens contain a "gas-less transfer" feature that allows attackers to drain them using just the owner’s signature.