2608004907
  • Open Access
  • Article

SLID Scam Detection under Temporal Drift: A Practical Framework for DeFi Security †

  • Minh Trung Tran 1,*,   
  • Nasrin Sohrabi 2,   
  • Brayden Killeen 1,   
  • Zahir Tari 1,   
  • Tony McGrath 3

Received: 10 Apr 2026 | Revised: 07 Aug 2026 | Accepted: 13 Aug 2026 | Published: 01 Oct 2026

Abstract

The Slow Liquidity Drain (SLID) scam has recently become a significant problem for decentralized exchanges (DEXs) and the decentralized finance (DeFi) environment in general. As SLID evolved from rug-pull scams toward cryptocurrency transaction fraud, several studies have implemented and published methods of detecting SLID scams, including heuristic-based and machine-learning (ML) based techniques. However, the applications of those detection methods to the real running DeFi application on blockchain are limited due to several constraints. Specifically, the newly arrived datasets that were collected from recent DEX activities have revealed that SLID behavior could evolve, which leads to the obsolescence and ineffectiveness of the previous methods when applying static thresholds to the detection in a real-time system. In this paper, we present a data-driven revalidation of SLID detection under various DeFi conditions and discover a robust method for threshold and feature-importance updating as the SLID behavior evolves over time with new data emerging. From the findings, we propose two practical and applicable models: A slow-adaptive solution that leans toward stable detection over a long period of time, and a fast-adaptive solution for more robust and real-time-sensitive detection. Those models together transform the theoretical detection methods to adapt to the real-world system that requires robustness and adaptability to various SLID evolutions.

References 

  • 1.

    Werner, S.; Perez, D.; Gudgeon, L.; et al. SoK: Decentralized Finance (DeFi). In Proceedings of the 4th ACM Conference on Advances in Financial Technologies, Cambridge, MA, USA, 19–21 September 2022; pp. 30–46.

  • 2.

    Jiang, E.; Qin, B.; Wang, Q.; et al. Decentralized Finance (DeFi): A Survey. arXiv 2023, arXiv:2308.05282.

  • 3.

    Chen, Y.; Bellavitis, C. Blockchain Disruption and Decentralized Finance: The Rise of Decentralized Business Models. J. Bus. Ventur. Insights 2020, 13, e00151.

  • 4.

    Momtaz, P.P. How Efficient Is Decentralized Finance (DeFi)? Available online: https://www.researchgate.net/publication/359551946_How_Efficient_is_Decentralized_Finance_DeFi (accessed on 7 August 2026).

  • 5.

    ERC-20 Token Standard. Available online: (accessed on 7 August 2026).

  • 6.

    How Uniswap Works. Available online: https://developers.uniswap.org/docs/get-started/concepts/how-uniswap-works (accessed on 7 August 2026).

  • 7.

    Mazorra, B.; Adan, V.; Daza, V. Do Not Rug on Me: Leveraging Machine Learning Techniques for Automated Scam Detection. Mathematics 2022, 10, 949.

  • 8.

    Torres, C.F.; Steichen, M.; State, R. The Art of the Scam: Demystifying Honeypots in Ethereum Smart Contracts. In Proceedings of the 28th USENIX Conference on Security Symposium, Santa Clara, CA, USA, 14–16 August 2019; pp. 1591–1607.

  • 9.

    Tran, M.T.; Sohrabi, N.; Tari, Z.; et al. Slow Is Fast! Dissecting Ethereum’s Slow Liquidity Drain Scams. arXiv 2025, arXiv:2503.04850.

  • 10.

    Tran, M.T.; Killeen, B.; McGrath, T. Adaptive Detection of DeFi SLID Scams: A Data-Driven and Industry-Oriented Framework for Large-Scale DeFi Security. In Proceedings of the 17th Australasian Information Security Conference (AISC 2026), Melbourne, VIC, Australia, 11–12 February 2026; pp. 98–103.

  • 11.

    Xu, J.; Paruch, K.; Cousaert, S.; et al. SoK: Decentralized Exchanges (DEX) with Automated Market Maker (AMM) Protocols. ACM Comput. Surv. 2023, 55, 1–50.

  • 12.

    Uniswap Main Page. Available online: https://app.uniswap.org/ (accessed on 7 August 2026).

  • 13.

    How Are Prices Determined? Uniswap. Available online: https://docs.uniswap.org/contracts/v2/concepts/advanced-topics/pricing (accessed on 7 August 2026).

  • 14.

    Cernera, F.; La Morgia, M.; Mei, A.; et al. Token Spammers, Rug Pulls, and Sniper Bots: An Analysis of the Ecosystem of Tokens in Ethereum and in the Binance Smart Chain (BNB). In Proceedings of the 32nd USENIX Conference on Security Symposium, Anaheim, CA, USA, 9–11 August 2023; pp. 3349–3366.

  • 15.

    Lin, Z.; Chen, J.; Wu, J.; et al. CRPWarner: Warning the Risk of Contract-Related Rug Pull in DeFi Smart Contracts. IEEE Trans. Softw. Eng. 2024, 50, 1534–1547.

  • 16.

    Gan, R.; Wang, L.; Lin, X. Why Trick Me: The Honeypot Traps on Decentralized Exchanges. In Proceedings of the 2023 Workshop on Decentralized Finance and Security, Copenhagen, Denmark, 30 November 2023; pp. 17–23.

  • 17.

    Shi, L.; Li, Y.; Liu, T.; et al. Dynamic Distributed Honeypot Based on Blockchain. IEEE Access 2019, 7, 72234–72246.

  • 18.

    Curve Finance Main Page. Available online: https://curve.fi/#/ethereum/swap (accessed on 7 August 2026).

  • 19.

    Balancer Main Page. Available online: https://balancer.fi/ (accessed on 7 August 2026).

  • 20.

    SushiSwap Main Page. Available online: https://www.sushi.com/ (accessed on 7 August 2026).

  • 21.

    PancakeSwap Main Page. Available online: https://pancakeswap.finance/ (accessed on 7 August 2026).

  • 22.

    SLID Anonymized Source Code for Reproduction. Available online: https://anonymous.4open.science/r/SLID-sourcecode-B638/ (accessed on 7 August 2026).

  • 23.

    Breiman, L. Random Forests. Mach. Learn. 2001, 45, 5–32.

  • 24.

    Kleinbaum, D.G.; Klein, M. Logistic Regression: A Self-Learning Text; Springer: New York, NY, USA, 2002.

  • 25.

    Chen, T.; Guestrin, C. XGBoost: A Scalable Tree Boosting System. In Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, San Francisco, CA, USA, 13–17 August 2016; pp. 785–794.

Share this article:
How to Cite
Tran, M. T.; Sohrabi, N.; Killeen, B.; Tari, Z.; McGrath, T. SLID Scam Detection under Temporal Drift: A Practical Framework for DeFi Security †. Pragmatic Cybersecurity 2026, 1 (3), 18. https://doi.org/10.53941/pc.2026.100018.
RIS
BibTex
Copyright & License
article copyright Image
Copyright (c) 2026 by the authors.
Article Metrics
32
Article Views
0
Citations