Pennysia Users Urged to Revoke Approvals After Exploit

Pennysia has urged users to revoke token approvals after an exploit drained funds from four addresses, with onchain records showing swaps had already been disabled before SlowMist issued a public warning about the incident. The affected addresses lost tokens through approval-based drains rather than a swap vulnerability, though the article does not specify the dollar value of losses or the tokens and chains involved. The event matters because lingering approvals let attackers move user funds even after a protocol pauses core functions like swaps, making revocation the primary defensive step. Users should watch for a fuller post-mortem from Pennysia and SlowMist clarifying the root cause and total losses, plus any indication of reimbursement or approval-manager fixes.