On February 21, 2025, when copyright staff members went to approve and sign a plan transfer, the UI showed what gave the impression to be a legitimate transaction Using the intended destination. Only once the transfer of money on the hidden addresses set through the malicious code did copyright