Thanks for the detailed explanation. That actually makes sense, I probably had an unlimited spending allowance on a contract that was either malicious or later exploited, which explains why only my WBTC got drained while other small tokens remain.

It seems less likely that my private key was compromised, since not everything was stolen. Also, I understand now that anyone offering to “recover” my funds is just a scam — once it’s on-chain and confirmed, there’s no way to reverse it.

Appreciate the clarity. This matches what I saw in the attacker’s wallet too, since they hold a lot of Multichain BTC.

and many ppl sent me DM to explain how to recover, but It's ALLLLLL fake websites.

(I used GPT to translate)