An attacker drained funds from users who had previously made infinite approvals to a Socket contract.