On February 21, 2025, when copyright staff went to approve and sign a program transfer, the UI showed what seemed to be a authentic transaction Together with the supposed spot. Only following the transfer of funds to the concealed addresses established via the malicious code did copyright staff