The platform was the victim of a phishing scam that routed users to a website that drained their wallets after they approved a transaction.