Matcha Meta users were exposed via a SwapNet smart contract exploit, with up to $16.8M stolen on Base, highlighting ongoing approval risks.