As for the altcoins, not only could be the same thing as I said above, but they also might have had trouble learning about how to use them and all, different wallets and making sure they can do in anonymously,...who knows...
Your right, one address, at the end, right as i caught it, the change came back to me, i emptied my entire wallet to protect what was still there, there was about 4 hours from the last transfer and when i saw it.
most of the btc is older, i moved all of them on to the trezor using multi bit, but bagged that a year or so ago but kept the same seed words, again, Im a holder, i buy things, but not with bitcoin. The whole thing is perplexing... Ive looked at the addresses and i can't tell what would be the difference. most of them are change wallets.
Another question, should I transfer them back using the reg wallet or the legacy? I really wonder if my chrome was compromised somehow. still, the private key is on the trezor, so how did they access it?