OK so I did a replace by fee TX for the whole balance to an alternate wallet. It is confirming on the chain as we speak. The unauthorized TX hung indefinitely while this new rescue TX is clicking along. I will keep you all posted. A couple questions for discussion and education of the community:

1) are my two cloned cold cards and the addresses associated with them now garbage?

2) what was the attack vector? The only operations I have performed in the last 7 days was to set up watch only wallets on a couple of mobile apps.

3) can the process of setting up watch only wallets on other apps compromise your keys to the point where transactions will show as “signed” as my hung, unauthorized TX did in BlueWallet and Nunchuk?

4) Who’s the cunt that wrecked my morning and what is your physical address? I know you are at

bc1qlfqvh9hla5sa64yfn9jsch54fqf09g52ja8t4r

Fuck you.