An LLM-driven multi-agent defense can curb bot-driven exploitation of copy traders in meme-coin markets, delivering roughly 3% average returns to copiers in simulated adversarial conditions; the improvement over standard baselines is clear in backtests but hinges on simulation realism and LLM performance.

Main Finding

An LLM-powered multi-agent system (MAS) using few-shot chain-of-thought (CoT) reasoning can substantially reduce the damage from manipulative bots in meme-coin copy trading. The proposed framework (specialized agents for coin evaluation, wallet selection, and timing) outperforms zero-shot LLMs and most statistic-driven baselines on prediction accuracy and outperforms all baselines on economic performance: identified smart-money wallets yield an average return of 14%, and an estimated copier return of ~3% per meme-coin investment under realistic market frictions.

Key Points

• Threat and attack surface
  • Meme-coin markets (Solana/pump.fun) are highly illiquid, extremely volatile, and visible on-chain, creating incentives for coordinated adversaries to exploit naïve copiers.
  • Adversaries control many wallets and coordinate strategies to extract copier liquidity (near zero-sum with copiers).
• Manipulative bot types (formalized heuristics)
  • Position manipulation: bundle bots (same-block coordinated buys by creator and controlled wallets), gradual bundle bots (spread accumulation to evade attribution), sniper bots (very early buys within 1–5 blocks after launch).
  • Attention manipulation: bump bots (rapid buy-sell flips to bump visibility), comment bots (coordinated hype comments).
• Detection methods
  • Simple, interpretable heuristics/algorithms: bundle detection (non-creator buys in launch block), sniper detection (non-creator buys within K=5 blocks), bump detection (flip count / net position change ratio α ≥ ξ, default ξ=50), comment-bot detection via LLM classification on few-shot examples.
  • Gradual bundles are noted as substantially harder to detect and remain an important limitation.
• MAS + CoT approach
  • Decomposes copy trading into three specialized agents (coin evaluation, wallet selection, timing assessment).
  • Agents ingest multi-modal on-chain and off-chain signals and use CoT few-shot prompts to internalize domain reasoning (better than zero-shot LLMs).
  • Multi-agent deliberation mimics team-based human decision-making and improves robustness to adversarial signals.
• Empirical performance
  • Dataset: historical wallet-level data on ~6,000 meme coins (Solana/pump.fun ecosystem).
  • The MAS improves prediction accuracy over zero-shot and most statistical baselines; economically, smart-money picks produce 14% avg return; modeled copier strategy produces ~3% avg return per coin after accounting for market frictions and bonding-curve mechanics.

Data & Methods

• Environment & market specifics
  • Solana: sub-second blocks (~400 ms), no public mempool, high throughput—limits public reaction time and concentrates front-running advantages with well-positioned actors.
  • pump.fun: bonding-curve token issuance (convex increasing price with cumulative demand), 1% transaction fee, on-chain visibility of trades and holdings, front-page bump on each trade.
• Data
  • Wallet-level transaction histories, token holdings, and social/comment data for ~6,000 meme coins including launch metadata.
• Feature engineering
  • Structured feature space capturing: manipulative-bot indicators (bundle/sniper/bump/comment), trader historical performance, experience, holding concentration, temporal trade patterns, and social signals.
• Detection & algorithms
  • Formal algorithms (Alg.1-3) for bundle, sniper, and bump detection using time-window/block-based heuristics and flip/net-position ratios; LLM few-shot prompt for comment-bot classification.
  • Defaults: sniper window K=5 blocks, bump threshold ξ=50, small ε=1 to avoid divide-by-zero.
• MAS implementation
  • Multi-modal LLM agents (on-chain + off-chain inputs), specialized subtasks, CoT few-shot prompting to embed domain heuristics into agent deliberation.
• Evaluation
  • Baselines: zero-shot LLM and statistic-driven models.
  • Metrics: prediction accuracy of profitable traders/smart-money; simulated economic returns for identified wallets and copier portfolios under realistic transaction frictions and bonding-curve price impact.

Implications for AI Economics

• Practical defense design
  • LLM-powered MAS with CoT can serve as a practical defensive layer for copy-trading platforms, improving retail protection and reducing extractable rents by adversarial bots.
• Market-design and platform policy
  • Platforms (copy-trading aggregators, launchpads) can integrate agent-based detection to flag or de-prioritize manipulated wallets/coins, altering incentives for manipulators.
  • Bonding-curve mechanics and on-chain visibility interact with bot strategies—platform-level constraints (e.g., throttling same-block buys, improved attribution) could mitigate manipulation.
• Predictability of trader profitability
  • The paper documents that trader profitability in adversarial meme-coin markets is partially predictable using structured features and agent reasoning, which has implications for retail advisory services and risk scoring.
• Arms-race and regulatory considerations
  • As detection improves, adversaries may adapt (e.g., more sophisticated gradual bundles and mixed strategies). Continuous model updating, adversarial-robust prompts, and transparency about detection thresholds will be necessary.
  • Regulators and marketplaces may need standards for labeling/managing suspected manipulative behavior; automated detection can inform surveillance but requires human-in-the-loop validation.
• Research directions in AI economics
  • Demonstrates a concrete application where LLM reasoning and multi-agent coordination yield measurable economic benefits—encourages further work on agent-based market surveillance, adversarial robustness, and incentive-aware mechanism design.
  • Raises questions about welfare impacts: protecting naïve copiers reduces transfers to sophisticated manipulators, potentially changing participation and liquidity dynamics in fringe crypto markets.

Limitations noted by the authors - Gradual bundles are difficult to detect reliably; detection is heuristic-driven and may have false positives/negatives. - Dependence on LLM performance and prompt engineering; domain drift and adversarially crafted comments/transactions could reduce effectiveness over time. - Evaluation is on historical Solana/pump.fun data—results may not transfer directly to other chains or market microstructures without adaptation.