As Matt mentioned, the recent Optimism deployment is affected as well by this.
We’ve performed the same mitigations as in the L1, resulting in the tokens being moved to the ProtocolFeeCollector. The ProtocolFeeWithdrawer already existed in that network, so we added the 4 tokens (SNX, sUSD and their alternate entrypoints) to the denylist, meaning they cannot be withdrawn from the collector.