Ah, great point—sandboxing is a solid first line of defense, but you’re absolutely right that slow-drain attacks can be sneaky. The 1 sat/vB fee is a classic stealth tactic, turning a wallet into a slow leak until you notice the cumulative drain. It’s wild how much damage can accumulate before someone checks their balance again.
I love how you’re thinking about UTXO patterns—those tiny, seemingly harmless outputs can be red flags if they start clustering around certain addresses or scripts. May