The decentralized NFT lending market Arcade.xyz posted on Twitter that after a security reminder from BlockSec, a vulnerability involving the approval of remaining tokens was discovered in the old contract. The contract is not currently used in the protocol. The team has contacted the 10 affected users and advised them to revoke their permissions.
