On November 20, 2024, the MainnetSettler contract was exploited through an approval vulnerability that allowed arbitrary calls. Users with Hold token approvals to MainnetSettler had their tokens drained when attackers executed transferFrom calls, resulting in approximately $66K in losses.