According to Cyvers Alerts, a user lost $803,500 worth of stETH by approving a malicious phishing contract. The victim's wallet address starts with 0x0D and ends with B6F70, and the phishing contract was approved about 6 minutes before the incident. At present, most of the stolen funds are still in the attacker's wallet, and some stETH has been exchanged for ETH.