But instead of buying, the approval you gave enabled the attacker to steal targeted tokens if you are lucky or all of your tokens it not lucky.