SlowMist found Pennysia's Ethereum Settlement contract was attacked via arbitrary external calls, letting attackers use users' remaining token approvals. Users who approved tokens to contract 0x3aad97e5a91b8e43b7dc830aceb004307678795e should revoke approvals now.
深潮 TechFlow 消息，11 月 13 日，据慢雾监测，在接到用户资金被盗报告后，慢雾调查发现，Pennysia 的以太坊 Settlement 合约遭攻击者通过任意外部调用利用，攻击者得以使用用户剩余的代币授权。
慢雾建议曾向该合约授权代币的用户立即撤销授权，涉及合约地址为 0x3aad97e5a91b8e43b7dc830aceb004307678795e。