Only users who have traded on the decentralized exchange in the last four days are apparently affected.
Source: https://cointelegraph.com/public/index.php/news/sushiswap-approval-bug-leads-to-3-3-million-exploit
SushiSwap approval bug leads to $3.3 million exploit
