defirisk.co
rubric v1.7.0

Attacker wallet pre-strike probe (low-gas failing txs)

Lombard Finance's assessment for RD-F-159 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Attacker wallet pre-strike probe | Applicable: Yes | Requires CTI feed and mempool monitoring. No pre-strike probe transactions from CTI-flagged addresses on Lombard contracts identified from public data. Hexagate provides real-time mempool monitoring as part of threat prevention platform but specific pre-strike probe pattern detection not independently confirmed for this signal. Not assessable without licensed CTI feed confirmation.

Sources #

  • Curator note
    Requires licensed CTI feed + mempool monitoring; public data insufficient for definitive assessmentretrieved 2026-05-05
  • URL
    https://www.lombard.finance/blog/how-top-security-experts-safeguard-the-lbtc-ecosystem/retrieved 2026-05-05

Methodology #

Detect whether a wallet in a threat-actor cluster is sending low-gas or intentionally-failing transactions to this protocol (pre-strike reconnaissance pattern).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol lombard factor RD-F-159 score gray collected_at 2026-05-05 12:03:08