Ask me how nervous I was moving my entire stack twice in three hours to counteract an unauthorized TX of all of my UTXO’s by a drainer exploit. Still don’t know where my security broke down but I suspect it was BlueWallet mobile. It was behaving strangely and opening without faceID etc. Deleted. Sparrow desktop only now.