A Solana risk score blends sanctioned identifiers, illicit SPL counterparties, bridge exits, scam token programs, and FTX-era estate exposure into one triage number.
High throughput raises false-positive risk
Busy accounts touch many counterparties. The model should weight attributed severe entities over raw degree centrality so popular routers do not look critical by volume alone.
Estate and exploit labels need dates
Wormhole exploit paths and FTX-related wallets carry time-bound meaning. A score without the event date misleads reviewers who inherit the case months later.
Bands as priorities
0-25 low, 26-59 medium, 60-84 high, 85-100 critical. Preserve component contributions so analysts can override stale tags with structured reasons.
Next step
Open the SOL category breakdown and document material transfers. Policy decides the action. This information is not legal or financial advice.