On February 21, 2025, when copyright staff went to approve and sign a routine transfer, the UI confirmed what seemed to be a respectable transaction With all the intended desired destination. Only following the transfer of funds to the hidden addresses established with the malicious code did co