Mixer withdrawal → protocol interaction

deBridge's assessment for RD-F-090 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

**Phase:** v1 phase 2 (advisory only, Tier C — never flips grade solo) **Threshold:** Wallet withdrew from Tornado Cash / Railgun within 30 days AND interacts with protocol core contracts with >$100K, flagged by ≥2 independent attribution sources. **Applicable:** Yes — DeBridgeGate and DlnSource are deposit-receiving contracts where this signal applies. **Current posture:** No evidence in public data of a mixer-funded attacker wallet currently depositing into deBridge. The April 2026 Drift la...

Sources #

URL
https://www.elliptic.co/blog/drift-protocol-exploited-for-286-million-in-suspected-dprk-linked-attackretrieved 2026-04-28

Methodology #

Detect whether a wallet that recently withdrew from Tornado Cash, Railgun, or similar mixer has interacted with this protocol.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol debridge factor RD-F-090 score gray collected_at 2026-04-28 01:27:58