@d0wnlore.eth
Sorry to hear this!
I’m not much of an onchain sleuth but seems this address has been stealing for a few weeks, including from @catmcgee, but has not done any outflow txns yet
https://platform.arkhamintelligence.com/explorer/address/0xD171B317a0caab2A57CB17170B014493E97b6fc0