Skip to content

ZAPs: A Reward Attribution Framework for DeFi Ecosystems with Adversarial-Robust Scoring via Parallel Anomaly Ensemble Detection

Jul 2026 · arXiv.org · Vol abs/2607.27859 · 1 citation · 22 references
Computer Science Economics

TL;DR

ZAPs, a reward attribution framework that combines economic contribution scoring with adversarial robustness, is presented, and it is shown that the maximum reward obtainable from any protocol is bounded by that protocol's global volume share.

Abstract

Incentive programs are central to user acquisition in decentralized finance, but many reward systems rely on raw volume, transaction count, and wallet count, making them vulnerable to bots and sybil operations. We present ZAPs, a reward attribution framework that combines economic contribution scoring with adversarial robustness. A composite activity score uses protocol-specific percentile normalization to limit whale dominance while preserving differentiation among users. A two-layer weighting mechanism combines protocol share within sector and sector share within the ecosystem, which reduces the profitability of farming small protocols. We show that the maximum reward obtainable from any protocol is bounded by that protocol's global volume share. ZAPs also introduces a four-layer defense stack consisting of transaction-level integrity checks, a parallel anomaly ensemble, post-distribution behavioral memory, and graph-based sybil clustering. The anomaly ensemble combines a one-class reconstruction model with an isolation forest and applies graduated rather than binary penalties. On 1,073 labeled malicious wallets covering 124,638 transactions, the ensemble achieves 0.923 +/- 0.013 ROC-AUC, compared with 0.891 +/- 0.016 for the reconstruction model alone, when the isolation forest is trained on benign wallets. Training it on the pooled population reverses its polarity and removes the ensemble gain. Controlled simulations reduce adversarial reward capture by 30-90 percent while legitimate-user scenarios change by 1-8 percent. Live campaigns recorded a 56 percent reduction in sybil allocation, a 49 percent increase in quality-wallet participation, and a 50 percent reduction in sell pressure.

View source

Similar papers

Book Open access Aug 2026

Silencing the Poison: An Unsupervised Granular Ball Defense Approach in Local Smoothing Context for Recommender Systems

In many advanced recommender systems (e.g., GNN-based), local smoothing mechanisms would distill collaborative signals but could inadvertently amplify targeted data poisoning threats. Existing defenses predominantly relied on rigid binary filtration strategies. However, such structural deletion of suspicious nodes ofte...

Yunmeng Zhao, Jun Shen, Shenbao Yu et al. · 0 citations
#artificial intelligence Preprint Sep 2026

Harness-agnostic detection and immunization of reward hacking in self-evolving language models

This work introduces HackProbe, a monitor that attaches to an arbitrary self-evolving loop through two black-box hooks, with no access to weights or activations, and proves a detectability bound that converts a target error rate into an explicit probe-size budget, and delimit what probe rotation does and does not buy.

Rong-Xin Yang, Yang Liu, Shang Luo et al. · 2 citations
Conference Jul 2026

Diffu Vader: Validity-Constrained Discrete Diffusion for Flow-Level NIDS Red Teaming

Machine-learning-based network intrusion detection systems (NIDS) are increasingly evaluated with synthetic adversarial traffic, yet reported evasion rates often do not distinguish between structurally infeasible flow records and feasible network behavior. In generative NIDS research, synthetic data is more often used...

Hamed Fard, Ilya Komarov, Gerhard Wunder · 0 citations
Open access Jul 2026

Fraud learns too: continual graph learning under strategic adversarial drift in dynamic networks

Game Theoretic Anticipatory Continual Graph Learning (GT-ACGL), a framework that casts fraud detection as a continuous Stackelberg game between a defender and an adaptive adversary, and encourages decision boundaries that remain comparatively stable under strategic structural perturbation.

Hui-Jie Fan, Ya-Nan Jiao, M. Wang et al. · 2 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.