ICANEWS

Detection and Analysis of Telegram Bait-and-Trap Schemes in Decentralized Exchanges

arXiv CS · · 3 min read · Engineering & Technology

Read research and analysis on Detection and Analysis of Telegram Bait-and-Trap Schemes in Decentralized Exchanges published by ICANEWS, a global research journal for emerging researchers.

Key Takeaways

  • Pump-and-Dump schemes on DEXs operate through Bait-and-Trap, not price manipulation.
  • Bait-and-Trap uses 'honeypot tokens' whose smart contracts allow purchase but prevent selling.
  • Organizers profited in 99.3% of cases, extracting over $7 million.
  • A transaction-simulation tool can detect honeypot tokens by testing sell functionality before purchase.

Why This Matters

The identification of Bait-and-Trap schemes reveals a specific and effective fraud mechanism within decentralized exchanges. The developed detection tool offers a practical defense against these operations, potentially safeguarding investors' funds and improving security in the DEX environment.

Overview

This research investigates the operational mechanisms of fraudulent schemes, termed Bait-and-Trap, within decentralized exchanges (DEXs), specifically contrasting them with traditional Pump-and-Dump (P&D) campaigns. While P&D schemes on centralized exchanges (CEXs) have received significant attention, their manifestation and underlying mechanics on DEXs have remained less explored. The study identified that operations resembling P&D campaigns on DEXs fundamentally differ from their CEX counterparts. Instead of price manipulation, organizers orchestrate deceptive campaigns around honeypot tokens, whose smart contract code permits token acquisition but prevents their subsequent sale by subscribers.

Victims, unaware of these embedded restrictions, purchase the tokens and are subsequently unable to liquidate their holdings, resulting in permanent fund loss. This novel fraud mechanism, termed Bait-and-Trap, offers a substantially more reliable profit generation strategy for organizers compared to traditional P&D schemes. Organizers achieved profitability in 99.3% of the observed cases, extracting over $7 million \in profits. To mitigate this threat, a transaction-simulation tool was developed, designed \to detect honeypot tokens prior \to purchase by testing the sell functionality against a token's live contract state.

Research Context

Existing literature has extensively examined Pump-and-Dump schemes within the context of centralized exchanges. However, the operational dynamics and prevalence of such manipulative tactics on decentralized exchange platforms, which operate without a central authority, have not been thoroughly investigated. This study addresses this gap by focusing on how these campaigns are executed and what specific mechanisms enable fraud \in the DEX environment, particularly concerning cryptocurrency tokens.

Approach

The research methodology involved monitoring 83 distinct Telegram channels. These channels were identified as platforms used \to coordinate Pump-and-Dump campaigns. Across these channels, a total of 3,677 events were collected. The data collection spanned two prominent blockchain platforms: the BNB Smart Chain and Ethereum. The analysis of these events focused on identifying the specific mechanisms employed by organizers and the outcomes for participants.

A key component of the research involved developing a transaction-simulation tool. This tool is designed \to provide a practical defense against Bait-and-Trap operations. Its functionality centers on detecting honeypot tokens *before* a purchase is made. This detection is achieved by testing whether a simulated user transaction \to sell a token would successfully execute against the token's live smart contract state.

Findings

Analysis revealed that while operations \in DEXs superficially resemble CEX-based Pump-and-Dump schemes, their underlying mechanism is fundamentally distinct. The primary finding was the identification of a fraud mechanism termed Bait-and-Trap. In this mechanism, organizers do not manipulate token prices through coordinated buying and selling. Instead, they orchestrate campaigns around 'honeypot tokens.'

Honeypot tokens are characterized by smart contracts engineered \to allow purchases by Telegram subscribers but prevent them from selling the tokens once acquired. This inherent restriction renders victims unable \to recover their invested funds. The study found that Bait-and-Trap operations offer a significantly more reliable profit strategy for organizers than traditional Pump-and-Dump schemes. Specifically, organizers achieved profitable outcomes \in 99.3% of the analyzed cases. The total profit extracted by organizers through these schemes exceeded $7 million.

Why This Matters

The emergence of Bait-and-Trap schemes represents a significant threat to participants in decentralized finance, demonstrating a sophisticated method of exploitation where investors are unable to exit their positions. This directly impacts user trust and financial security within the DEX ecosystem. The development of a transaction-simulation tool offers a practical, proactive defense mechanism against this specific type of fraud.

Potential Applications

The developed transaction-simulation tool can be applied to detect honeypot tokens prior to purchase. By simulating a sell transaction against a token's live contract state, users or platforms can verify the ability to sell tokens. This capability provides a practical defense mechanism against Bait-and-Trap operations, enabling potential investors to identify and avoid fraudulent tokens before committing funds.

Research Information

Institution
arXiv CS
Original Study
View Publication
Source
arXiv CS

About ICANEWS

ICANEWS is a global research journal for emerging researchers, publishing student and emerging researcher work across all fields.