Deposit with permit

This is a very common situation with user signatures and mempool...

This is a perfect example of the frontrun attack with the theft of a user's personal signature. We all remember that all transactions go into the mempool, from where they are added to the blockchain by validators, right? So, a hacker can steal your transaction signature from the mempool, create his own transaction and make a deposit to himself on behalf of your account.