honestly thought i did everything (mostly) right. use a password manager, never click on phishy shit, etc. today, someone managed to usurp my phone's SIM and was able to drain my Coinbase account.
pretty surreal, honestly. wish i'd moved shit to a wallet regularly. i'm not super technical, but it seems more like a vulnerability of my phone provider (T-Mobile) than me personally.
either way, just another reason to keep your security as tight as possible. learn from my (massive fucking) mistake.