Once they'd entry to Safe Wallet ??s process, they manipulated the consumer interface (UI) that clients like copyright workforce would see. They changed a benign JavaScript code with code made to alter the intended place in the ETH in the wallet to wallets managed by North Korean operatives