On February 21, 2025, when copyright employees went to approve and sign a routine transfer, the UI confirmed what seemed to be a reputable transaction with the meant destination. Only once the transfer of funds on the hidden addresses set through the malicious code did copyright workers recognize anything was amiss.As being the window for seizure