You didn't get hacked. You signed away your bag.

One unlimited approval = a malicious contract can drain your tokens anytime. No second signature needed.

How to unfuck yourself:
• Go to revoke.cash
• Paste your wallet address
• Look for "unlimited" approvals
• Revoke anything sketchy or unused
• Repeat every 3 months

Your wallet remembers every permission you gave. Even if you forgot.