paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Detecting Various DeFi Price Manipulations with LLM Reasoning

利用 LLM 推理检测各类 DeFi 价格操纵
ASE 2025 40th IEEE/ACM International Conference on Automated Software Engineering (ASE)2025匹配度 4/10 · 该论文将 LLM 用于智能合约代码理解与 DeFi 价格操纵检测,与“LLM/Agent 改进静态分析或形式化验证”以及“PL→AI 静态分析用于 ML/Agentic 程序”的主线仅有弱交叉,且不涉及浮点程序分析或贝叶斯程序分析;但其问题驱动与工业落地评估符合用户偏好。引用 4 inbox
Juantao Zhong, Daoyuan Wu, Ye Liu, Maoyi Xie, Yang Liu, Yi Li, Ning Liu
crossref: 2026-09-12

AI 速览

一句话:提出首个基于 LLM 的 DeFi 价格操纵检测方法 DeFiScope,支持标准与自定义价格模型。

DeFi 管理巨额链上资产,却易受价格操纵攻击。现有系统对自定义协议中的非标准价格模型效果有限,而这类协议占近三年 95 起相关攻击的 44.2%。本文提出首个基于 LLM 的检测方法 DeFiScope:利用 LLM 从合约源码抽象价格计算并推断代币价格趋势,借助 Foundry 合成链上数据微调价格专用 LLM,再结合从低级交易恢复的高层操作与挖掘模式检测操纵。实验显示,其对真实攻击召回率 80%,可疑交易精确率 96%,良性交易零误报,显著优于 SOTA;产业合作确认 147 起真实攻击,含 81 起新发现。

问题
DeFi 价格操纵攻击检测,尤其是现有 SOTA 系统对自定义 DeFi 协议中的非标准价格模型检测效果不佳。
方法
提出首个基于 LLM 的 DeFiScope:用 LLM 从智能合约源码中抽象价格模型并推断价格趋势,借助 Foundry 合成链上数据微调专用 LLM,结合从低级交易恢复的高层 DeFi 操作与系统挖掘的模式进行检测。
评估
在真实攻击上达到 80% 召回率,可疑交易精确率 96%,良性交易零误报,显著优于 SOTA;并通过成本效益分析与产业合作确认 147 起真实攻击,其中 81 起为先前未知事件。
原文摘要(Abstract)

DeFi (Decentralized Finance) is one of the most important applications of today’s cryptocurrencies and smart contracts. It manages hundreds of billions in Total Value Locked (TVL) on-chain, yet it remains susceptible to common DeFi price manipulation attacks. Despite state-of-the-art (SOTA) systems like DeFiRanger and DeFort, we found that they are less effective to non-standard price models in custom DeFi protocols, which account for 44.2% of the 95 DeFi price manipulation attacks reported over the past three years.In this paper, we introduce the first LLM-based approach, DeFiScope, for detecting DeFi price manipulation attacks in both standard and custom price models. Our insight is that large language models (LLMs) have certain intelligence to abstract price calculation from smart contract source code and infer the trend of token price changes based on the extracted price models. To further strengthen LLMs in this aspect, we leverage Foundry to synthesize on-chain data and use it to fine-tune a DeFi price-specific LLM. Together with the high-level DeFi operations recovered from low-level transaction data, DeFiScope detects various DeFi price manipulations according to systematically mined patterns. Experimental results show that DeFiScope achieves a high recall of 80% on real-world attacks, a precision of 96% on suspicious transactions, and zero false alarms on benign transactions, significantly outperforming SOTA approaches. Moreover, we evaluate DeFiScope’s cost-effectiveness and demonstrate its practicality by helping our industry partner confirm 147 real-world price manipulation attacks, including discovering 81 previously unknown historical incidents.

链接与引用

DOI 原文 ·

BibTeX
@inproceedings{paperbot9404,
  title = {Detecting Various DeFi Price Manipulations with LLM Reasoning},
  author = {Juantao Zhong and Daoyuan Wu and Ye Liu and Maoyi Xie and Yang Liu and Yi Li and Ning Liu},
  booktitle = {ASE},
  year = {2025},
  doi = {10.1109/ase63991.2025.00149}
}