A permit phishing attack appears to have siphoned 1,807 liquid staked Ether from the victim's wallet address.