If you can dump an image of your disks to an encrypted external drive, the best time was before you changed anything. The next best time is right now.

We're doing some digging over at SN: https://stacker.news/items/1001011/r/optimism The coinos nsec may be compromised too because the kind 0 changed 4h20m ago.