On February 21, 2025, when copyright staff went to approve and indication a plan transfer, the UI confirmed what seemed to be a respectable transaction While using the supposed desired destination. Only once the transfer of resources into the concealed addresses established with the malicious code did copyright staff understand something was amiss