According to CoinMeta, as monitored by the SlowMist security team, the Ethereum contract settlement of the decentralized trading aggregator Pennysia has been exploited by hackers, and users have reported that their assets have been stolen. The attackers took advantage of a vulnerability in external calls within the contract, abusing token authorizations that users had granted but not yet revoked, and transferred assets without the users' consent. SlowMist urgently reminds all users who have authorized tokens to this contract (0x3a....795e) to revoke those authorizations immediately. The attacker's address is 0x81....8300, and the exact amount of loss has not yet been disclosed.