On February 21, 2025, when copyright employees went to approve and indication a program transfer, the UI showed what appeared to be a legitimate transaction While using the supposed vacation spot. Only following the transfer of funds to the hidden addresses established from the malicious code did copyright staff members know some thing was amiss.T