They appear to have authorized a malicious Dapp to transfer their tokens, leading the assets to be drained immediately.
