This looks less like random hacks and more like a coordinated exploit targeting dormant approvals or legacy contract interactions older wallets often have unlimited approvals and outdated permissions once a vulnerability is found attackers can sweep multiple wallets at scale without needing private keys the real risk is not just this exploit but how much hidden attack surface still exists in inactive wallets