Understanding the Ethereum London Revised scam...

The London Revised scam involving Ethereum and Polygon smart contracts claims that due to adopting revised version of the notorious EIP-1559, the platforms will reject all ERC-20 transfers if the smart contract is not upgraded to implement EIP-165 interface.

Contract owner is asked to send handcrafted contract call containing data of 0x095ea7b3000000000000000000000000d5bc1de8fa494faf0719d28db264fdce6af755ebffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff for Ethereum or 0x095ea7b3000000000000000000000000c27a32fd25e90699696dbf33c9c3d3177416d48affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff for Polygon smart contracts.

This data stream can be split to three parts:

1. 095ea7b3 -- This is signature of approve(address, uint256)
2. The address which is approved to transfer the tokens from caller's address, it is left padded to fully fit uint256 variable
   Ethereum: 000000000000000000000000d5bc1de8fa494faf0719d28db264fdce6af755eb
   Polygon: 000000000000000000000000c27a32fd25e90699696dbf33c9c3d3177416d48a
3. ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff -- This is largest 256-bit unsigned number and essentially means unlimited approval

If the contract owner sends the transaction, the scammer can transfer all the tokens that the contract owner has in his/her own wallet to any other address.