Arbitrum airdrop: Hacked vanity addresses used to siphon $500K

The tokens were stolen by someone who compiled vanity addresses eligible for ARB airdrops.