I’m trying to understand how it’s possible for my Metamask wallet to get hacked or interact with a smart contracts that withdraw instantly any BNB or tokens i receive knowing that:
Your private key has been compromised and hacker now using automatic send tool which do automatic bnb transfer im second whenever you send bnb to address. This tool is called sweeper. My wallet is also compromised in that way and I lost more than 1k$ and so far I didn't found any solution. You can learn full about sweeper working process in Below article
https://blog.mycrypto.com/how-to-beat-an-ethereum-based-sweeper-and-recover-your-assetsIf you used your wallet in PC then I am pretty sure that all problem happened there because pc security is very low and installing any unknown publisher app/game will enter malware your pc. These malware leak your personal data ,keyboard key and copy text. Once hackers get your secret key than he use sweepers and we cannot send our tokens or do any action because gas fee automatically transfer to hacker address.
I will recommend to use mobile wallet when you create new wallet and don't store cloudy, only save in hard copy. This is much better because possibility of risk is low in mobile.