Exploiters found an approval bug in the SushiSwap Route Processor 2, draining the smart contract of $3.3 million in fund