I am new to Brave and exactly the same thing happened to me. I had my auto-contribution turned off and yet they still made a contribution without my permission.
I am seriously considering not using Brave browser any longer. If this keeps up, I can only believe this is a hoax.
