Someone on r/chia reporting that they had 250 XCH stolen from a “cold” wallet which they connected to the Internet to check the balance. It instantly became a hot wallet on clearly a compromised machine.
Keep your cold wallets cold. Create them on a clean machine, put them on paper or something equally unconnected and use blockchain explorer to keep tabs by entering the payout address. Have farming or pool rewards sent to them.
This sucks and I feel for the guy, lets not let this happen again.
I guess the challenge is how to actually use, spend or convert your XCH when you need to.