On February 21, 2025, when copyright personnel went to approve and sign a schedule transfer, the UI showed what seemed to be a legitimate transaction With all the intended spot. Only following the transfer of funds towards the hidden addresses set via the malicious code did copyright personnel