defirisk.co
rubric v1.7.0

Avg attacker reconnaissance time for peer-class protocols

Aave v3's assessment for RD-F-163 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Peer-class reconnaissance time is high: Lazarus / DPRK operations (USPD pattern) typically involve 60-90 day reconnaissance windows before strike. Chainalysis and security analysts have documented pre-strike preparation activity for the April 18 attack. This is a historical standing risk indicator for the lending protocol class, not a current alert (reconnaissance completed for the April 18 attack). Yellow as forward-looking risk assessment.

Sources #

Methodology #

Report the average number of days of attacker reconnaissance activity before a strike on peer-class protocols (lending/DEX/bridge/perps), sourced from the hack database.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol aave-v3 factor RD-F-163 score yellow collected_at 2026-04-27 23:28:46