SlowMist: Pennysia Ethereum Settlement Contract Attacked, Users' Residual Authorized Funds at Risk

Odaily reports that SlowMist has issued a security alert stating that after receiving reports of stolen user funds, an investigation revealed that the Settlement contract deployed by @PennysiaLabs on Ethereum was attacked. The attacker exploited an arbitrary external call vulnerability in the contract to transfer tokens that users had previously authorized but not yet used. SlowMist reminds all users who have ever authorized tokens to this Settlement contract to revoke their authorizations immediately.