if you refer to this post https://tangled.com/c/b8ad3bae34020f2b08f2e0b3b1f680bd28a21118e it is not a bug and not a tangled related virus. it is a windows virus that is changing data user copied to steal/spoil transactions. it doesn't change on send, it does change on copy/paste. if you look at the video he posted you will see that address he copied at 0:14 is different from what he pasted on 0:19 (pay attention to entire address, not only start and end characters)