SlowMist: Pennysia Ethereum Settlement Contract Attacked, Users Should Revoke Authorization

on November 13, per SlowMist monitoring, after receiving reports of stolen user funds, SlowMist investigated and found that Pennysia's Ethereum Settlement contract was exploited via arbitrary external calls, enabling attackers to access the remaining token allowances of users.

SlowMist advises users who have approved tokens for this contract to immediately revoke their approvals. The affected contract address is 0x3aad97e5a91b8e43b7dc830aceb004307678795e.