Attacker wallet pre-strike probe (low-gas failing txs)
Venus Protocol's assessment for RD-F-159 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No publicly documented mempool probe activity (low-gas failing txs) preceding March 2026 or September 2025 Venus incidents. March 2026 attack proceeded from 9-month accumulation to execution without documented probe txs. September 2025 Lazarus attack used social engineering, not on-chain probe txs. Requires partner mempool feed to assess at the wallet-cluster level; not available at OSINT tier.
Sources #
- URLVenus Thena (THE) Incident: What Broke and What Was Missed — BlockSechttps://blocksec.com/blog/venus-thena-donation-attackretrieved 2026-04-28
Methodology #
Detect whether a wallet in a threat-actor cluster is sending low-gas or intentionally-failing transactions to this protocol (pre-strike reconnaissance pattern).
See the full factor methodology and distribution across all protocols →