At the time they'd access to Safe Wallet ??s process, they manipulated the consumer interface (UI) that clients like copyright staff members would see. They replaced a benign JavaScript code with code meant to change the supposed spot from the ETH during the wallet to wallets controlled by