The account was compromised due to a leaked backend password, allowing someone to log into the CRM and change the email. They then withdrew funds using USDT and sent a confirmation email from the new address. The backend review checks whether the email and address match those in the system.

The withdrawal process encountered the following issues: the email was changed, the withdrawal method was changed, and the name provided by the applicant did not match. In this case, if a withdrawal can still be processed, it raises suspicions that there must be collusion between internal and external parties to achieve this.

There was no strict check on the withdrawal of funds on the platform, and 8,500 US dollars were stolen. The deposit is cash, and the withdrawn is usdt. It can't be done if it's not an inside job.