$11M Lost in Permit Signature Scam: Security Experts Urge Caution with Off-Chain Transactions