On February 21, 2025, when copyright employees went to approve and indication a routine transfer, the UI showed what seemed to be a genuine transaction While using the supposed desired destination. Only after the transfer of funds on the hidden addresses set because of the destructive code did