The attacker noticed an exploit in the muut forum software that localbitcoins.com used. Anyone who clicked the forum link on localbitcoins was then redirected to a fake localbitcoins site made to look like the actual localbitcoins in order to man in middle attack localbitcoins users in order to steal the bitcoins from their wallets. When you click the forums link, it takes you to what appears to be a localbitcoins login screen. and as soon as you enter your username, password and 2fa code, your bitcoins get withdrawn to the attackers wallet. The attacker ended up stealing 7.95205862BTC collectively from 5 users (I was one of the users affected). https://i.imgur.com/VnTpRpc.png screenshot of the withdrawal from my localbitcoins account