According to ChainCatcher, the Cyvers Alerts monitoring system detected suspicious transactions with MixedSwapRouter on ARB. The attacker’s funds came from ChangeNOW, and the attacker received about $16,000.