According to the founder of SlowMist, Yuxian, over 6 million dollars worth of funds on ZKFair L1 Bridge were transferred to its admin-privileged Safe multi-signature address on March 27th. They were then moved to an EOA address, with most going into Aave as collateral, which is suspicious behavior. This EOA address is one of the owners of ZKFair Safe's multi-signature.