A user connects their Ethereum wallet to what appears to be a legitimate DeFi protocol, approves a transaction, and watches their balance disappear. The approval was for an unlimited token transfer to an address controlled by attackers. This scenario repeats