we need to act before the attacker’s transaction gets mined. One approach is to send our transaction with RBF disabled, making it harder for them to replace it again.