The trick allows the attacker to confirm zero-value transactions from the victim’s wallet, hijacking the user’s transaction history.
