[ummonk]

It sounds more like this was a predefined account recovery flow, rather than some LLM agent making use of arbitrary write access.