On February 21, 2025, when copyright staff members went to approve and sign a regime transfer, the UI confirmed what gave the impression to be a reputable transaction While using the meant destination. Only once the transfer of funds to the hidden addresses set with the malicious code did copyr