Still working on figuring out what is exactly going on, ~166 affected since July.

Examples:
RNJ9SH6XXXT3MKG2 with contribution_recur id of 1257722

If you look at that one in log_civicrm_contribution_recur the currency field is somehow set to USD from EUR. I think that is coming from the fact that the "gateway_refund_id":"RNJ9SH6XXXT3MKG2" is the same as gateway_parent_id":"RNJ9SH6XXXT3MKG2" in the audit which seems to be the format for chargebacks. But it should have never gotten to the refund queue in the first place

The change happened at 2022-09-09 20:24:09.

I looked around in the process control logs and did find that it got sent to the refund queue from the audit:
2022-09-09 20:24:09,932 ERROR WD RefundQueueConsumer: [info]
2022-09-09 20:24:09,932 ERROR {"gross":"2.50","date":1662590440,"type":"refund","gateway":"adyen","gateway_refund_id":"RNJ9SH6XXXT3MKG2","gateway_parent_id":"RNJ9SH6XXXT3MKG2","gross_currency":"EUR","source_name":"Recon Auditor","source_type":"audit","source_host":"civi1001","source_run_id":16638,"source_version":"unknown","source_enqueued_time":1662754988}
2022-09-09 20:24:09,934 ERROR WD refund: RNJ9SH6XXXT3MKG2: Marking as refunded [info]
2022-09-09 20:24:09,997 ERROR WD refund: RNJ9SH6XXXT3MKG2: Successfully marked as refunded [info]
2022-09-09 20:24:09,997 ERROR WD wmf_common: Committing DB transaction

The data in that day's audit file settlement_detail_report_batch_970.csv is: