Magic Eden stopped using a settlement contract in 2024. The approvals stayed live, and they got drained this week. This should have been fixed years ago, across the whole industry. It wasn’t. So fix it now, before it’s your users. Scope approvals to the order. Put time limits on them where possible. Make every settlement contract pausable. When you retire one, announce it loudly and make sure users aren’t left exposed to it. “Revoke your approvals” isn’t a security model. It’s what you say after you’ve already fucked up. @opensea