Avg attacker reconnaissance time for peer-class protocols

Evidence summary #

**Phase:** v1 deferred (P2; backward-looking annotation rather than trigger) **Applicable:** Informational context — for bridge protocols of this class (threshold-signature validators), the Harmony Horizon exploit involved months of key compromise; the Ronin exploit involved ~100 days of validator key acquisition; the Drift DPRK attack involved ~6 months of social engineering. The deBridge August 2022 phishing attempt occurred approximately 6 months after mainnet launch (Feb 2022) — consisten...

Sources #

Methodology #

Report the average number of days of attacker reconnaissance activity before a strike on peer-class protocols (lending/DEX/bridge/perps), sourced from the hack database.

See the full factor methodology and distribution across all protocols →