Almost assuredly someone is brute forcing all single-byte keys. In fact the private key equal to 4 is a single-bit, or “one hot” key, so an attacker could have found it by brute-forcing 384 different keys 😂