AMLBench: A Real-Incident Benchmark for Agentic Blockchain Anti-Money Laundering
Qishuang Fu, Hang Zheng, Yuchen Lei, Yuexin Xiang, Qin Wang, Yuanzhe Zhang, Shiping Chen, Andreas Deppeler, Joseph Liu, Ziyao Liu, Tsz Hon Yuen
Abstract
Tracing illicit funds on public blockchains remains largely manual. As funds move across accounts and undergo asset conversions, they become mixed with other inflows, requiring repeated queries and expert judgment to trace. Large language model (LLM) agents offer a way to automate this process, but their ability to reconstruct case-related transfer networks from limited clues remains unclear. To bridge this gap, we present AMLBench, an anti-money laundering (AML) benchmark built from 24 real-world cases and 5.05 million Ethereum transfer records. For each case, agents start from limited clues and explore these transfer records through composable transaction-query and fund-flow analysis tools, deciding which accounts and branches to pursue. The final tracing results are evaluated against case annotations, while tool interaction logs reveal how agents discover and select relevant transfers and at what resource cost. We also develop AMLAgent, which integrates fund-tracing guidance and query feedback to dynamically guide investigative decisions. With GPT-6 Astra, AMLAgent achieves macro averages of 80.82% transfer-level precision and 84.73% query coverage across 24 real-world cases. Further analysis of the large-scale Bybit case reveals substantial differences in transfer retention and token usage across models, even with similar submission precision. AMLBench establishes a reproducible benchmark for evaluating both tracing outcomes and investigative processes, laying the groundwork for more reliable and efficient autonomous AML investigations.
Create a lesson
Related papers
From topology-optimization brief to solver-checked release: separating intent, admissibility and acceptance knowledge for language agents
Shaoliang Yang, Jun Wang
Gather or Act? Belief-Level Counterfactual Labels for Deadline-Aware Incident Response in Cyber-Physical Systems
Ali Mohammadi Ruzbahani
ProteoCraft: Protein Design as Proposal-Verification Search
Fang Wu, Hongbin Lin, Bingchen Duan et al.
Inner optimizers in active-learning Kriging reliability analysis: a pre-specified comparison and the unconservative estimates left by unlearned failure modes
Wei-Chang Yeh
Green Composites for Safer and Durable Water Pipelines
Djebbara Benzerga, Faycal Sotehi, Adel Chouiter et al.
Herding or Racing? Decomposing Cross-Account Order-Flow Persistence in On-Chain Markets
Yichong Bai, Dingyue Kan