You're right. Seems to be an exploit. My autowithdraw was active even though I toggled it to off. And the lN address is not mine