Vitalik: It was a sim swap, meaning that someone socially-engineered T-mobile itself to take over my phone number. I had seen the "phone numbers are insecure, don't authenticate with them" advice before, but did not realize this.