On February 21, 2025, when copyright staff members went to approve and indication a routine transfer, the UI showed what appeared to be a legit transaction with the supposed desired destination. Only following the transfer of cash for the hidden addresses established because of the destructive code did copyright employees understand something was