Here is a webapp I wrote to facilitate safe migration of wallets that I have been sharing with users I verified as impacted since the original incident occurred.
My legal counsel finally gave approval to publish the tool publicly:
is-my-cardano-safu.vercel.ap…
You can use "Get Me Outta Here", and it will handle the corner cases that can result in loss of funds.
Note that the tool is use at your own risk, it performs the safe migration handling the known edge-cases, however it doesn't guarantee comprehensiveness and there may be uncovered edge-cases that even this tool is not equipped to handle.
There are obscure and rare corner cases where this can lead to further loss of funds.
Some wallets will automatically withdraw staking rewards as part of the first transaction and return them to your wallet instead of sending them to the other wallet.
If you panic and only send ADA, your native assets will be returned to you as change.
This can move assets from somewhere that they're safe, to an address that is compromised, and expose them to further losses.
The point is, if you understand all the nuance and corner cases, there is a safe way to move your funds. If you don't, and you're rushing and panicking, there are ways you can make a mistake.
And that's why I'm being careful not to tell people what they *should* do, while still trying to be helpful.