On February 21, 2025, when copyright employees went to approve and indicator a program transfer, the UI showed what seemed to be a legit transaction with the supposed spot. Only following the transfer of funds to the hidden addresses established because of the malicious code did copyright staff