If you have a wallet running on LNBits' legend server, have a quick look at it. I had one I used for dev stuff that was drained of over 100k sats a few days ago via what appears to be an exploit using Satsdice (an extension I don't have installed and didn't previously know even existed).

nostr:npub1a8jzweysxa9qmtmht874736aalm0lwdsl306nrys9d05ktlrhw3qcr5pj4 worth looking into. I saw that nostr:npub1r4jrmus0hqgmx0pulvzvwtdsf34wqvwm768kzway2sruhhv5g6mqcul5p9 also mentioned this happening to his wallet on legend.