I knew I'd heard of assmilking... it's taking sats from a server taking advantage of people who create reusable qr codes without realising the danger of it.

LNBits had a feature to help prevent it. That's how I know about it.

https://github.com/lnbits/withdraw