He mistakenly selected SIGHASH_NONE when broadcasting his transaction.

This allows anyone to RBF his transaction and change the outputs.

A bot that steals inscriptions replaced his transaction and burned 0.79 BTC to mining fees.

Sparrow now has a warning, but IMO this options shouldn't even be clickable for single input transactions: