The reason is clear now, it’s not related to @BinanceWallet. It was @zerobasezk’s frontend being hacked, which caused affected users to authorize USDT to a malicious contract, leading to the theft. As for why the frontend was hacked, @mirrorzk and I have some guesses. Let’s wait until he’s done, not an easy task.