The contract has used an “anySwapFeeTo” function to transfer hundreds of thousands of dollars worth of tokens to itself, which on-chain sleuth Spreek suspected may have been malicious.