Lixir Vault Forged Permit Approval Drain

The attacker reused one non-owner signature across 41 permit calls on six Lixir vault clones, gained allowances over victim shares, and used withdrawETHFrom and withdrawFrom to extract USDC, USDT, ETH, and illiquid LIX from Uniswap V3-backed positions.