He typed back one word: "Keys?"

All of this can happen within of the wallet being indexed.

Malicious actors use automated scripts to run these queries continuously, instantly "draining" any newly discovered wallets that are not properly secured. 3. Mitigation and Best Practices