🚨 SlowMist TI Alert 🚨 After receiving user reports of stolen funds, we looked into @PennysiaLabs. The Settlement contract on Ethereum was exploited through an arbitrary external call, which let the attacker spend users’ leftover token approvals. 🔧 ⚠️ Anyone who ever approved tokens to the Settlement contract should revoke now 👇 0x3aad97e5a91b8e43b7dc830aceb004307678795e Attacker: 0x813a5ab666adeba907548235fbac087642878300 Attack tx: https://etherscan.io/tx/0x2716c50e450272240f68f2827bcb4a336c2ac520951e0e530154566c295b732d