How could they drain your sparrow wallet, was it a hot wallet? don't you need to sign to move any corn?

My thoughts exactly. Even if they got the wallet files weren't they password encrypted?