DARPA Launches IMR to Track Vulnerabilities in Digital Markets

Faced with threats that do not necessarily involve hacking, DARPA aims to leverage artificial intelligence to enhance the resilience of electronic markets. The Intrinsic Market Resilience program plans to model rules, detect design flaws, and propose fixes before they can be exploited.

Quantified Precedents and a National Security Concern

DARPA recalls two episodes where design failures caused major disruptions. In California, during the 2000s, flaws in the deregulated energy market were exploited by traders, contributing to a crisis estimated between $40 and $45 billion. The federal government then invoked the Defense Production Act to secure the natural gas supply for military facilities, highlighting the potential impact on military readiness. In 2010, a flash crash caused U.S. stocks to plunge within minutes. Investigators later partially linked the episode to manipulative practices by an individual, although other issues also played a role, and many gaps have since been addressed. According to DARPA, this individual did not incur any losses, as their orders were structured to avoid execution due to a market-specific characteristic. The agency connects this initiative to a broader concern: future attacks may exploit vulnerabilities in digital infrastructures, supply chains, or markets, rather than resorting to conventional military operations.

Primary Target: Design Flaws Rather Than Hacking

The stated priority focuses less on data theft or intrusion and more on exploiting flaws inherent in the very design of markets. The increasing number of electronic exchanges and participants raises the risk of disruptions and the potential for harmful exploitation, while the proliferation of AI and other technologies lowers the entry barrier for malicious actors. The program does not target illegal manipulations typically pursued by regulators for individual profit motives. Instead, DARPA emphasizes its focus on adversaries whose goal is to cause disruptions, economic damage, or instability, taking advantage of legal and regulatory protections deemed insufficient.

IMR: Modeling Markets and Demanding Proof of Resilience

With Intrinsic Market Resilience, DARPA seeks AI tools capable of uncovering weaknesses in the rules of U.S. financial markets and other digital markets to correct these flaws before they can be exploited. The stated objective concerns stock, bond, energy, and cloud computing markets. The program intends to use sophisticated systems to simulate market operations, examine protective measures, and identify potential vulnerabilities. Its ultimate goal is to identify design errors in national online trading platforms and propose fixes. If a model fails to demonstrate that a market meets a resilience criterion, DARPA requires it to present a specific case of potential flaw to pinpoint the vulnerability and suggest a correction.

Targeted Tools: Language Models and Automated Reasoning

The agency wants large language models to transform regulatory documents and technical specifications into computational models that describe the functioning and interactions of markets. Matthew Wilding highlights recent advancements in automated reasoning and AI, stating that these techniques open new ways to defend systems, while also acknowledging that they can be repurposed for offensive purposes. The declared aim is to apply them to electronic markets to enhance their resilience and reliability. DARPA describes systems that have become faster and more efficient, but also more exposed due to their interconnectivity. According to Wilding, the approach goes beyond simple testing: it involves examining and analyzing to show where a market is robust, where it is not, and how to strengthen its resilience.