I didn’t see in the thread what exactly happened.
I wish this guy used a passphrase or if he did, kept at least that passphrase offline this hack could be avoidable. https://nitter.net/rmessitt/status/1723141037856596175
Discussion
Fella had his and his dad's btc in a hot wallet. 25 btc total. Seed stored in password manager, Keepass. Backed this up to a file on his phone with a weak password. Sent a copy of this to OneDrive too. He was visiting El Salvador from Scotland with his Dad. Plans to make some app that uses lightning. Goes to transfer some btc from the fat stack for testing the app and finds that his savings were drained a couple of months ago. Funds jumped a few times and then off to coinjoin. Dunno if legit and I didn't check anything. This is just what I read.
Thank you! 🙏