BlockSec Phalcon has identified a vulnerability in the Base chain's "transferFrom" function, leading to a loss of approximately $90,000. The issue, reported on September 14th, arises from insufficient access control, which permits arbitrary low-level calls within callback functions. BlockSec has advised users to immediately revoke all approvals for the contract 0xD9f4a3238154ff6439e37F98c9B11489353715Bb to mitigate further risks.