Relayed Mk3 honeypot fee race

TFTC relays a honeypot run by @we_satoshis: a vulnerable Coldcard Mk3 was hit by an attacker ten seconds after sats were deposited, a pre-signed RBF transaction raced the attacker and won, the attacker returned with a higher fee, and the race continues until every sat is burned in mining fees rather than reaching the attacker. The attached images show a device running firmware 5.0.1 dated 2021-10-29, a mempool view with a 9,000 sat fee at 82.4 sat/vB, and a device screen reading "Balance Online 86% / Watch Guard / Panic TX Expired"; a video is attached and is not captured by this tool. Held as a dated, instrumented observation of attacker response time on an affected Mk3, alongside the cktripwire honeypots already in the record. TFTC is a media outlet relaying someone else's experiment: the setup, the ten-second figure and the account of the fee race are the experimenter's and are not verified here.