Publication Type
Journal Article
Version
acceptedVersion
Publication Date
1-2026
Abstract
Decentralized finance (DeFi) applications depend on accurate price oracles to ensure secure and fair transactions. However, poorly integrated oracles remain susceptible to manipulation, enabling attackers to exploit smart contract logic for unfair asset valuation and financial gain. While many such vulnerabilities are only detected after deployment, smart contracts are typically immutable once deployed, making post-hoc fixes costly or infeasible. This highlights the critical need for detecting oracle manipulation risks before deployment. In this paper, we propose AiRacleX, a novel LLM-driven framework that enables pre-deployment detection of price oracle manipulation vulnerabilities by leveraging the complementary strengths of multiple large language models (LLMs). Our approach begins with domain-specific knowledge extraction, where an LLM model synthesizes precise insights about price oracle vulnerabilities, eliminating the need for profound expertise from developers or auditors. This knowledge forms the foundation for a second LLM model to generate structured, context-aware Chain-of-Thought prompts, which guide a third LLM model in accurately identifying manipulation patterns in smart contracts. We evaluate AiRacleX on 60 known vulnerabilities from 44 real-world DeFi exploits and Code4rena projects spanning 2021–2023. The results show that AiRacleX achieves a 2.58 times improvement in recall over the state-of-the-art GPTScan, with comparable precision. Our framework also demonstrates strong extensibility and efficiency, and supports deployment with open-source LLMs to enhance security and reduce operational cost.
Keywords
LLM, Price Oracle Manipulations, Smart Contract Security, Prompt Engineering
Discipline
Artificial Intelligence and Robotics | Information Security
Research Areas
Intelligent Systems and Optimization
Areas of Excellence
Digital transformation
Publication
IEEE Transactions on Services Computing
Volume
19
Issue
1
First Page
2
Last Page
13
ISSN
1939-1374
Identifier
10.1109/TSC.2025.3638205
Publisher
Institute of Electrical and Electronics Engineers
Citation
GAO, Bo; WANG, Yuan; WEI, Qingsong; LIU, Yong; GOH, Rick Siow Mong; and LO, David.
AiRacleX: Automated detection of price oracle manipulations via LLM-driven knowledge mining and prompt generation. (2026). IEEE Transactions on Services Computing. 19, (1), 2-13.
Available at: https://ink.library.smu.edu.sg/sis_research/11229
Creative Commons License
This work is licensed under a Creative Commons Attribution-NonCommercial-No Derivative Works 4.0 International License.
Additional URL
https://doi.org/10.1109/TSC.2025.3638205