Partial-drain test transactions
Yearn Finance's assessment for RD-F-091 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Signal applicable in principle (partial-drain test patterns before large drain). Yearn's 4 historical exploits were predominantly atomic single-transaction events (exploit 1 = multi-tx sequence but not multi-session pre-drain; exploit 3 = single-tx atomic attack). No partial-drain pre-cursor test-tx pattern identified in the Yearn exploit record as a separate detectable phase. production pipeline signal not yet implemented signal; production pipeline not implemented.
Sources #
- InternalYearn hacksdatabase — pre-drain pattern analysishacksdatabase/hacks/yearn-rekt1.md Real-Time Signals: 'TVL exit early: N — vault TVL appeared normal before the attack'; hacksdatabase/hacks/yearn-rekt3.md: single atomic tx; no multi-session pre-drain.retrieved 2026-05-16
- T-09 v2-deferred note for partial-drain sub-patternT-09 §3.3: F89 (partial-drain test txs) folded into RD-F-098 tier-B precursor rule; not a separate live signal at v1.retrieved 2026-05-16
Methodology #
Detect one or more small-value outflows prior to a larger drain that match a known pre-strike pattern (low-value same-function calls from new wallet).
See the full factor methodology and distribution across all protocols →