CirculateBUSD and CirculateWBNB Exit Scam

**Executive Summary:** CertiK detected that on 09–12 January 2023 a deployer (EOA 0x5695E) deployed Circulate* contracts that accepted deposits then, via an unverified SwapHelper contract and a malicious third-party dependency in the `Start Trade` function, transferred roughly $2.5M of user funds to the deployer; funds were subsequently bridged and sent to Tornado Cash for laundering.