According to CoinMeta, the Ethereum settlement contract of pennysia was exploited by attackers through arbitrary external calls. The attackers used the remaining tokens authorized by users. It is recommended that users who have authorized tokens to this contract immediately revoke such authorization. The contract address involved is 0x3aad…795e.