Connected to a site a friend gave me. Then after a few hours it was a Scam

My friend sent me a link to a project and I connected to the site and approved spending limit. Then I knew it was a scam. Note that it did not ask for any seed phrase private keys or whatnot it’s just connect wallet. What I did are the following.

  1. Disconnected the site all off them
  2. Sent my tokens to my 2nd Metamask
  3. Used debank to revoke the contracts and such
  4. All I have left on my account where bnb for gas fees and connected projects where I have some NFts on them.

Now the golden question. Do they still have access to my metamask wallet account and Am I in the clear. Can I use it as is?
As of now there is no activity on my metamask.