On February 21, 2025, when copyright staff members went to approve and signal a plan transfer, the UI showed what seemed to be a legitimate transaction Together with the supposed location. Only following the transfer of resources towards the hidden addresses established with the malicious code