Urgent Help: Transaction Dropped & Replaced by another Unknown Transaction

My friend was trying to deposit some funds to Axie Infinity's Ronin Bridge

https://etherscan.io/tx/0xf2b1763c25e7a4fd65924bade7a2ff7c2a9e47f7227d32f0fae0fd3eec5a572c

However, the transaction was dropped and replaced by another transaction as below:

https://etherscan.io/tx/0xf21794294bccd706fc30542361638db3dc6936a78aeabf00191b219b5773658a

The funds ended up in another private wallet which he didn't recognize, and my friend has not authorised the replacement transaction on his Metamask.

Can anyone enlighten me on how this has happened? Is the wallet compromised?