153 wallets drained through approvals they had already given
People had given the LI.FI contract unlimited approval to spend their USDC, USDT and DAI. A flaw in a new contract update let an attacker use those existing approvals to pull the tokens straight out of their wallets.
Unlimited approvals stay active until you revoke them.
Source: LI.FI incident report
