Nope Moved utxo from the vault then sent a portion of that utxo to a new address. the sats that went into the change address are what got drained