They have to already have your keys. They sign a new transaction with a higher fee, pointing the output to a different address.

Speed is your friend if you end up in this situation. Have to frontrun them with higher fees.

Def both! Single especially but Multi too if both CC — And yes cold card seed generator But CC should be viewed as verboten ,, anathema Just my understanding from following this from the get go.

I think by publishing your transaction in the visible mempool, you're notifying people that your seed might be an easy target. They then have minutes to focus on it to solve it before its included in the block. if they crack it, then they can replace the fee to sweep it from you. I think that's why ...

if you used a coldcard to generate a private key and did not do sufficient dice rolls, the key is compromised

RBF attacks expose Visa's old habit of reaping profits from flawed systems, now mirrored in Bitcoin's multi-sig and single-sig weaknesses.

nostr:nprofile1qqsgm8ftw7fsae2wc0jxltmhfhwsg8dmfe92xkk50sp93p9zsmwkt7sau37q6 the weak seed is the danger, rbf is just how somebody who already knows your key races you to spend it. single sig off a weak coldcard seed is fully exposed, and multisig only saves you if the other keys came off different ...