arXiv Machine Learning

Velocity- and Regime-Aware Detection of Intraday Options Market Manipulation, with Explainable Attribution

arXiv:2608. 05373v1 Announce Type: cross Abstract: Intraday market manipulation is hard to detect because its footprint is brief, buried in millions of quotes, and statistically similar to ordinary volatility.

arXiv Machine Learning
Aug 24

If It Walks Like an Arbitrage: Protocol-Agnostic Detection with Decidable Structural Equivalence

The paper presents a protocol‑agnostic method for detecting arbitrage in Ethereum by converting transaction traces into a canonical abstract syntax tree using a convergent rewriting system of 15 rules. This canonical form enables decidable structural equivalence of fund flows, allowing the authors to identify arbitrage cycles without relying on protocol‑specific patterns. Evaluated on 220,000 Ethereum blocks, the system confirmed 469,801 arbitrage opportunities, matching 83.5% of a production MEV platform and covering 81% of a GNN classifier, while producing no false positives in a manual sample.

By Adam Khayam, Hamid Kolli, Mohamed Iguernalala, \c{C}agdas Bozman
arXiv AI
Sep 3

ClaimReceipt: Verifying Evidence Sufficiency and Coverage in Agent Evaluations

The paper introduces ClaimReceipt, a specification and verifier that checks whether a claim in an agent evaluation can be recomputed from retained evidence (sufficiency) and whether the evidence covers the entire experiment set (coverage). Using the CR‑2 verifier on 1,392 historical records, the authors demonstrate accurate reproduction of audit verdicts, non‑redundant field groups, and zero false positives on semantic faults. In a prospective CR‑3 run, the system correctly flags missing receipts and preserves coverage when private evidence is withheld, while adding minimal overhead to inference time and transaction size.

By Peiying Zhu, Sidi Chang
arXiv Machine Learning
Jun 30

Forensic Trajectory Signatures for Agent Memory Poisoning Detection

arXiv:2606. 30566v1 Announce Type: cross Abstract: We discover a behavioral invariant in LLM agents under persistent memory poisoning: in architectures where routing information is retrieved through observable memory-tool invocations, successful attacks require calling memory_recall_fact before email_send_email, a transition that non-exfiltrating sessions rarely exhibit.

By Jun Wen Leong
arXiv AI
Aug 19

Auditing Self-Evolution in Financial Agents: Capability Gains, Security Drift, and Execution-Interface Mismatch

The paper audits self‑evolving financial agents—SkillOpt, Agent Workflow Memory (AWM), and ReasoningBank—by evaluating their performance, security drift, and execution‑interface mismatches in simulated e‑banking scenarios. It shows that while utility improves after evolution, exposure to malicious content and unauthorized state changes also rise, and that AWM’s text‑action envelope can disrupt tool execution, highlighting the need for comprehensive auditing beyond accuracy metrics.

By Jialong Li, Jialing Zhu