defirisk.co
rubric v1.7.0

Attacker wallet pre-strike probe (low-gas failing txs)

Usual (USD0 / bUSD0 / USUAL)'s assessment for RD-F-159 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Mempool probe detection (attacker wallet sending low-gas failing txs to protocol as pre-strike testing) requires live mempool monitoring against a curated threat-actor cluster list. Neither the mempool listener nor the threat-actor cluster feed is available in static assessment. Cannot confirm or deny from public sources.

Sources #

  • Internal
    T-09 Real-Time Signals SpecT-09 research/outputs/09-realtime-signals.md — RD-F-159 is v1-deferred; requires mempool + cluster feedretrieved 2026-05-17

Methodology #

Detect whether a wallet in a threat-actor cluster is sending low-gas or intentionally-failing transactions to this protocol (pre-strike reconnaissance pattern).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol usual factor RD-F-159 score gray collected_at 2026-05-16 20:39:44