exploit
Pennysia settlement contract exploited on Ethereum, users told to revoke approvals
SlowMist flagged an arbitrary external call in Pennysia's Ethereum settlement contract. Swaps paused before the public warning; four wallets drained via stale approvals.