You should move the rest anyways, it is possible the bot just scanned the first 20 or so address and left, you are still vulnerable. Was this a coldcard mk3?