they're using an exploit or a vulnerability in taproot. taproot wasn't a scam, it was probably rushed through without proper review. this is the result of not fully thinking things out for a long enough period of time.