Attacker wallet pre-strike probe (low-gas failing txs)

Evidence summary #

Solana equivalent of mempool probe: low-fee failing transactions to Marinade program accounts from attacker-labeled wallets. No public report of such probing activity found. Requires Solana on-chain pattern monitoring with attacker cluster feed; not yet wired.

Sources #

Methodology #

Detect whether a wallet in a threat-actor cluster is sending low-gas or intentionally-failing transactions to this protocol (pre-strike reconnaissance pattern).

See the full factor methodology and distribution across all protocols →