SlowMist: Pennysia Ethereum Settlement Contract Attacked, Users Should Revoke Approvals

According to TechFlow on November 13, as monitored by SlowMist, after receiving reports of user funds being stolen, SlowMist's investigation found that Pennysia's Ethereum Settlement contract was exploited by an attacker through arbitrary external calls, allowing the attacker to use users' remaining token approvals.

SlowMist advises users who previously approved tokens to this contract to revoke approvals immediately. The affected contract address is 0x3aad97e5a91b8e43b7dc830aceb004307678795e.

Source: TechFlow