Partial-drain test transactions

Evidence summary #

The DPRK October–December 2024 trading activity (small-value ETH positions, total ~$476k) is semantically consistent with test-transaction reconnaissance patterns but these were actual trading positions, not direct partial-drain contract interactions with Bridge2. No documented small-value withdrawal probes from Bridge2 that fit the strict partial-drain definition. Signal does not fire under the strict threshold definition. Gray — not applicable under current evidence.

Sources #

Methodology #

Detect one or more small-value outflows prior to a larger drain that match a known pre-strike pattern (low-value same-function calls from new wallet).

See the full factor methodology and distribution across all protocols →