After that they had usage of Safe Wallet ??s method, they manipulated the consumer interface (UI) that consumers like copyright workforce would see. They changed a benign JavaScript code with code built to change the intended place from the ETH inside the wallet to wallets controlled by North Korean operatives. This destructive code would only go