Attacker wallet pre-strike probe (low-gas failing txs)
Falcon Finance's assessment for RD-F-159 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Mempool probe (attacker wallet sending low-gas failing txs) | Applicable: Yes | Requires mempool monitoring + licensed CTI feed. No pre-strike probe transactions from CTI-flagged addresses on Falcon contracts identified from public data. Not assessable.
Detail #
Signal requires: (1) a curated threat-actor wallet cluster list, (2) real-time mempool monitoring, (3) pattern-matching for low-gas failing transactions from flagged wallets targeting Falcon contracts. None of these are deployed for this T-10 static assessment. No public reporting of mempool probe activity targeting Falcon Finance. Not assessable from static public data.
Sources #
- Curator noteCurator note: dual dependency on CTI feed and mempool monitoringRequires licensed CTI feed and mempool monitoring; public data insufficient; no probe txs identified from public sources as of 2026-05-12retrieved 2026-05-12
Methodology #
Detect whether a wallet in a threat-actor cluster is sending low-gas or intentionally-failing transactions to this protocol (pre-strike reconnaissance pattern).
See the full factor methodology and distribution across all protocols →