Wallet reports

Risk score

A score from 0 to 100, a level, and a confidence: how dangerous it is to deal with a wallet, and how sure Iris is.

Levels

LevelScoreMeaning
LOW0–39No significant risk signals found.
MEDIUM40–69Some signals warrant a closer look: exposure to flagged wallets, privacy pools, burner funding.
HIGH70–100Strong risk signals: sanctioned, frozen, a drainer, an exploiter, a mixer. Don't send it money.

What raises it

Three kinds of signal feed the score:

What it is
A threat label on the wallet itself: sanctioned, frozen by a stablecoin issuer, a drainer, an exploit, a scam, phishing, a malicious contract. These put it straight into high risk.
What it does
Risky behaviors: draining, mixing, poisoning, burner hops. See the Risk column in Behaviors.
Who it deals with
Direct transfers with flagged wallets. One is medium risk; the score grows with each distinct flagged counterparty, but exposure alone never makes a wallet high risk.

The strongest signal decides. Signals don't add up: a wallet with a drainer behavior and two flagged counterparties is as risky as its worst finding. That keeps the score readable: the evidence at the top explains it.

Confidence

The risk confidence is how sure Iris is of the level. When a signal decides, it is that signal's confidence. When nothing is found, the score is low, and the confidence depends on how complete the data is: a wallet with a long, fully read history gets a surer “low” than one with a few transactions.

Low risk is not a clean bill of health

It means nothing risky was found in what was read. A new wallet, or one analyzed at a shallow depth, has little to go on. Check the confidence, and analyze deeper when it matters.