On February 21, 2025, when copyright personnel went to approve and indicator a routine transfer, the UI showed what gave the impression to be a reputable transaction with the intended destination. Only after the transfer of resources into the hidden addresses established via the malicious code