On February 21, 2025, when copyright workers went to approve and sign a regimen transfer, the UI showed what gave the impression to be a legit transaction While using the intended destination. Only after the transfer of resources for the hidden addresses established from the malicious code did copyright workers realize a little something was amiss