An attacker drained funds from users that had previously made infinite approvals to a Socket contract.