After the Ekubo Huff Router incident, users with lingering ERC20 approvals to vulnerable deployments could still have been drained later, even with zero balances at the time. To eliminate this risk without requiring user action, we deployed a rescue contract that neutralized vulnerable allowances and prevented potential future theft of funds currently valued at ~$284k. The mechanism worked as follows: - Ekubo Core flash-loaned tokens to the user - the vulnerable router immediately used the user's allowance to repay the loan - this exhausted the allowance without requiring user action Note that this method only works for finite approvals whose amount does not exceed Ekubo Core's balance of that token. By cancelling all eligible allowances across the three vulnerable mainnet router deployments, we eliminated most of the remaining approval risk: Source code: