At the time they had usage of Safe Wallet ??s method, they manipulated the consumer interface (UI) that consumers like copyright staff members would see. They changed a benign JavaScript code with code meant to alter the supposed desired destination of the ETH in the wallet to wallets controlle