Nearly got drained - am I safe?

Please don’t judge, but I fell for the first two prompts of the fake safeguard telegram hack. I clicked verify and then entered my phone code.

After TG sent a warning prompt I immediately revoked access for any devices, enabled 2FA login and logged back out & in to cancel any active sessions.

I don’t use any TG bots (only mobile phantom,) and so far nothing seems to have been drained.

The hacker sent a follow up message that I responded to, trying to see if he had any form of access.

Am I safe having immediately revoked access and followed these steps? I’m on iOS.