There currently is no WireGuard logging available in the controller logs.  Please add WireGuard logging which should, at a minimum, log all connections by remote users.  Otherwise there is no way to determine if a bad actor has been able to connect to the network.