On February 21, 2025, when copyright staff members went to approve and signal a schedule transfer, the UI confirmed what seemed to be a legitimate transaction While using the meant destination. Only after the transfer of cash towards the concealed addresses set because of the malicious code did copyright workforce recognize something was amiss.As