He downloaded online tools claiming to generate mnemonic phrases. The generated phrases were pre-set. Once the wallet was created, hackers could withdraw assets at any time.