https://x.com/mononautical/status/1834196815786225822Well, this is about my case. Based on that post, my transaction had SIGHASH_NONE, which means anyone could have spent the change. I reached out to the support channel for Sparrow Wallet on Telegram, and they explained that, because of this, bots were able to take control of the transaction.
Most likely:
- some bot used RBF to send the money to itself.
- then another bot did the same.
they kept doing it, reducing the amount (an RBF requirement) until there was almost nothing much to transfer, everything became fee.
It is still weird, because I did not even know about this SIGHASH_NONE option until now. I did not even see it during transaction procedure.
why would sparrow wallet use sighash_none? that's just like submitting a blank check to anyone to fill in their name...
i thought sparrow wallet was supposed to be a good wallet but if it's doing that kind of thing then i'm not so sure anymore.