defirisk.co
rubric v1.7.0

Mixer withdrawal → protocol interaction

Chainlink CCIP's assessment for RD-F-090 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Applicable: CCIP is a high-value bridge target; mixer-to-protocol interaction is a Tier C advisory signal. No confirmed Tornado Cash withdrawal to CCIP core contract interaction detected via public OSINT. CTI feed required (Chainalysis/TRM) for definitive assessment. CCIP per-lane token-bucket rate limits provide natural detection window if a mixer-funded attacker attempts a large transfer. Signal is advisory-only (Tier C) and not grade-eligible even when live.

Sources #

  • Docs
    CCIP Onchain Architecture - Upgradability (EVM)CCIP architecture: per-lane token-bucket rate limits configurationretrieved 2026-05-16
  • Internal
    Chainlink CCIP profile — incidents section.research/protocols/chainlink-ccip/00-profile.md §10 — no known protocol exploits; no mixer-funded wallet interactions documentedretrieved 2026-05-16

Methodology #

Detect whether a wallet that recently withdrew from Tornado Cash, Railgun, or similar mixer has interacted with this protocol.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol chainlink-ccip factor RD-F-090 score gray collected_at 2026-05-16 01:55:09