defirisk.co
rubric v1.7.0

Attacker wallet pre-strike probe (low-gas failing txs)

Superstate's assessment for RD-F-159 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

AllowList gate means low-gas probe txs from non-allowlisted wallets to USTB/USCC contracts would revert at the allowlist check and yield zero usable reconnaissance. No probe patterns from threat-actor wallets found in accessible transaction data. Signal diminished by architecture.

Sources #

  • Etherscan
    USTB Proxy — EtherscanUSTB proxy 0x43415eB6ff9DB7E26A15b704e7A3eDCe97d31C4e — AllowList gates all mints/transfers; unauthorized probe txs revertretrieved 2026-05-16

Methodology #

Detect whether a wallet in a threat-actor cluster is sending low-gas or intentionally-failing transactions to this protocol (pre-strike reconnaissance pattern).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol superstate factor RD-F-159 score green collected_at 2026-05-16 00:06:37