The paper presents a semi‑supervised learning framework for detecting illicit Bitcoin flows in Shared Send Mixers, using a large historical dataset of 163 million transactions. It demonstrates that the success of SSL depends on data quality rather than sheer volume, with high‑fidelity features such as KeyLinker address clustering and Shared Send Untangling complexity metrics achieving an F1 score of 0.84 on unlabeled data. The study also shows that common heuristics like One‑Time Change introduce noise, underscoring the importance of smarter feature engineering in blockchain forensics.
arXiv:2608. 20271v1 Announce Type: new Abstract: The rapid proliferation of memecoins on blockchain platforms has increased the risk of fraudulent activities, particularly rug pulls.
The paper presents a method for early detection of fraudulent memecoins (rug pulls) on the Solana blockchain, using a dataset of 6.4 million tokens collected over seven months. It shows that most rug pulls occur within an hour of launch and that classic machine learning models, especially Gradient Boosting (XGBoost), can reliably predict them using only the first five minutes of trading data. Cross‑platform data fusion between PumpFun and Raydium further improves detection by reducing domain shift.
arXiv:2607. 27370v1 Announce Type: new Abstract: Sybil attackers are Blockchain actors that adopt the characteristics of regular users to exploit airdrops or influence governance.
arXiv:2607. 27350v1 Announce Type: new Abstract: Sybil bots are Ethereum actors that imitate legitimate users to extract airdrop rewards or influence governance.
Bitcoin's pseudonymous nature makes it challenging to analyze user-level activity, since a single user may control multiple identifiers (addresses). Existing heuristic-based methods attempt to identif...
The paper introduces a method to improve heuristic-based Bitcoin address clustering by using graph neural networks to generate contrastive embeddings. It releases a large Bitcoin transaction graph dataset, presents a learning framework that aligns embeddings with existing heuristics, and applies hierarchical clustering to refine clusters and detect suspicious merges. The approach offers a more modular and theoretically grounded way to analyze user-level activity on the blockchain.
arXiv:2608. 12864v1 Announce Type: cross Abstract: Public blockchain data enables large-scale DeFi-related analysis, but many existing approaches are application-specific, difficult to scale, or hard to interpret.
arXiv:2504. 01882v2 Announce Type: replace Abstract: The use of DNS over HTTPS (DoH) tunneling by an attacker to hide malicious activity within encrypted DNS traffic poses a serious threat to network security, as it allows malicious actors to bypass traditional monitoring and intrusion detection systems while evading detection by conventional traffic analysis techniques.
arXiv:2401. 14283v4 Announce Type: replace-cross Abstract: In today's data-driven world, the proliferation of publicly available information raises security concerns due to the information leakage (IL) problem.
arXiv:2609.15521v1 Announce Type: new Abstract: Federated learning enables multiple parties to train a shared model without centralizing raw data with the help of an aggregator, but introduces integr...
arXiv:2607. 21839v1 Announce Type: cross Abstract: Privacy-preserving machine learning auditing protocols allow auditors to assess models for properties such as accuracy or fairness, without revealing their internals or training data.
arXiv:2605. 12759v2 Announce Type: replace Abstract: The Lightning Network (LN) is a second-layer protocol for Bitcoin designed to enable fast and cost-efficient off-chain transactions.