He mistakenly selected SIGHASH_NONE when broadcasting his transaction.
This allows anyone to RBF his transaction and change the outputs.
A bot that steals inscriptions replaced his transaction and burned 0.79 BTC to mining fees.
Sparrow now has a warning, but IMO this options shouldn't even be clickable for single input transactions:
https://github.com/sparrowwallet/sparrow/commit/8d7308bc37fbf957c32fd9756086b35d9585740e
mattcrv / Matt Carvalho
npub1se…sekcj
2024-09-16 18:56:58
in reply to nevent1q…mlk9
Author Public Key
npub1sedkh5uwyfypc3vfh39svzsvpnqnqnaae2dquvug6s5zm29msw3qxsekcj