According to Odaily, SlowMist CISO 23pds reported on the X platform that attackers managed to seize safe owner permissions through a single forged signature attack. It is suspected that multiple macOS or Windows computers were compromised. The attackers might have been present in the internal network for some time, potentially monitoring internal communications and transaction timings.