Attacker wallet pre-strike probe (low-gas failing txs)

Evidence summary #

Cosmos-appchain equivalent would be failed low-fee transactions to x/clob or x/bank; no public mempool monitoring infrastructure exists for dYdX's Cosmos appchain to assess this signal. The Jan 2026 supply-chain attack infrastructure showed no on-chain mempool-probe pattern — it was a package-repository injection, not on-chain reconnaissance.

Sources #

Methodology #

Detect whether a wallet in a threat-actor cluster is sending low-gas or intentionally-failing transactions to this protocol (pre-strike reconnaissance pattern).

See the full factor methodology and distribution across all protocols →