On February 21, 2025, when copyright employees went to approve and sign a schedule transfer, the UI showed what seemed to be a respectable transaction While using the supposed destination. Only after the transfer of funds for the hidden addresses set through the malicious code did copyright staff notice something was amiss.five. On the right side,