Through the connection, the scammers downloaded a malicious botnet onto the developer's office computer which could access every wallet and contract on the platform.