A PancakeSwap liquidity provider (LP) suffered a loss of approximately $2.96 million after signing a malicious EIP-7702 authorization, according to on-chain security officer Specter. The attacker withdrew $1.48 million in BSC-USD and $1.48 million in BUSD liquidity from the victim's account, subsequently converting the BUSD to ETH. The attacker has since deposited around $1.46 million into Tornado Cash, while approximately $1.48 million in USDT remains in their address.