learned today that my old Trezor (circa 2014) has had its seed compromised. Haven't used it in a while but spun it up today to see if I could use it in a multisig.

I sent a test transaction and it was immediately swept to the OKX exchange once it confirmed (saw it via mempool dot space).

Luckily it was only a small amount (test transactions are vital folks), but I sincerely have no idea how this happened. Always had a passphrase.

The only thing I can think of is perhaps a malicious Trezor Suite at some point?