transactions in the feed is a double edged sword. very convenient but also means you can get drained if a signer is compromised. all it takes is a "send my entire balance to 0x_____" also this is once again from @schedly. revoke that signer ASAP.