Partial-drain test transactions

Evidence summary #

Partial-drain test transactions | Applicable: Yes | No small-value probe transactions from known attacker wallets on Balancer v2 Vault or v3 Vault detected in assessment window. November 2025 exploit was a rapid multi-chain drain (~$128M in <30 minutes) with no staged partial-drain precursor pattern — attack was algorithmic and executed in a single sequence. Remaining v2 CSP pool TVL is residual post-exploit. No pre-strike test transaction pattern detected. | Threshold: Small-value outflows fitting known pre-strike pattern preceding a larger drain | Would fire: No

Sources #

Methodology #

Detect one or more small-value outflows prior to a larger drain that match a known pre-strike pattern (low-value same-function calls from new wallet).

See the full factor methodology and distribution across all protocols →