Partial-drain test transactions
Chainlink CCIP's assessment for RD-F-091 — scored not_assessed on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
v1-deferred. Applicable in principle — partial-drain test transaction patterns are a bridge-class precursor. CCIP's dual-layer verification (Commit DON + RMN bless) means incremental probing via test transactions provides minimal reconnaissance value for an attacker vs. single-layer bridges. No partial-drain test pattern detected via public data. PH method; RT signal requiring on-chain pattern-matching infrastructure not available in static dry run.
Sources #
- InternalChainlink CCIP profile — architecture section.research/protocols/chainlink-ccip/00-profile.md §7 — CCIP dual-layer verification architecture (Commit DON + RMN)retrieved 2026-05-16
Methodology #
Detect one or more small-value outflows prior to a larger drain that match a known pre-strike pattern (low-value same-function calls from new wallet).
See the full factor methodology and distribution across all protocols →