I accidentally sent ETC to an address that previously only had ETH on it. This was an address created after the DAO hardfork. As far as I understand with EIP 155 I have replay protection from any transactions that I sign with this address on the ETH chain. The address in question is an address that I was using frequently to sign transactions with.
However, at some point I am going to want to move the ETC on this address, and as far as I understand backwards compatibility with EIP 155 is that my ETH address won't be protected. I send my ETC and the tx can be replayed on the ETH chain.
Questions: (1) The replay attack can only be for the amount that was send on the original tx? Or can it be for a larger amount if the the ETH address holds more Ether?
(2) Also what happens to tokens that are on my address? Say the answer to question (1) is that a replay attack from an ETC transaction could drain my entire ETH address. Before I send the ETC tx I send all my ETH to a different address. Then my tokens are still on the ETH address. When I then go and send an ETC tx could someone use that tx to move my tokens to a different ETH address?