An Ethereum risk score compresses sanctions, mixer pools, darknet settlement, ransomware, scam contracts, and exploit-drain paths into a 0-100 triage number for an ETH account.
Contract interaction is a first-class input
Unlike UTXO coins, Ethereum risk arrives through calls to labeled contracts: mixers, scam token factories, exploit receivers, or bridges used after a hack. The model needs the call graph and token transfer list, not only native ETH movements.
Known high-impact events shape category weight
Public cases such as the Ronin bridge theft and Tornado Cash designation created durable labels that still appear in screening. Time and distance still matter: a five-hop remnant should not equal a direct sanctioned interaction.
Bands stay organizational policy
0-25 low, 26-59 medium, 60-84 high, 85-100 critical. Two firms can share the same on-chain evidence and choose different thresholds. Keep raw findings separate from the policy decision.
Next step
Open the category breakdown for the ETH address and document material transactions. Your jurisdiction and customer context decide the action. This information is not legal or financial advice.