misplaced bitcoins – How can a sleuth sweep my funds off a taproot deal with?

Not too long ago been testing creating my very own Ordinals inscriptions utilizing the Rust Bitcoin crate. After a profitable inscription creation, i transferred some funds from an exterior pockets to that very same taproot deal with, however it instantly received sweeped by some sleuth.

Here is precisely what occurred (with txids):

1. Profitable inscription reveal transaction (script path spend): da914918b8ced05f0ba2d1baf5c06efa9d98f1e31810a24f929b7eebf1714bdd

2. Moved bitcoins off the taproot deal with (key path spend):
   ce96b650866a45d7cfb8defc65e84f3f9189d2cde72aa86a206ff2f0f36ff8a5

3. Needed to deposit some bitcoins again to that very same taproot deal with:
   1bdaa74a83de3dc5dbbfa013045b6e0110b3780ab92d55eb7fbeee8735b6f1a2

4. Then instantly, sleuth was capable of sweep it out (weirdly used my funds as miner charges):
   b6d2b59f099e7f743a31839f32ba18731359736c36e8286464c5ae8dea7a8350

My takeaways from this:

• Did i expose one thing within the earlier transactions?
• I made certain to make use of random aux_rand in the course of the signing course of to stop signature reuse.
• Was somebody capable of derive the non-public key from my uncovered signatures and public key?

Would respect if anybody can take a peep on the historical past of these transactions that have been all associated to the taproot deal with right here: bc1p2rtem0q6v346u5nm6e7m95e8ea7gmgr0q5nrdreugt0htlnhxv6qz22lyv