BE-CTDE: Blockchain-Enabled Multi-Agent Reinforcement Learning with Anomaly Detection and Token Economics
Authors: Chih-Wei Huang, Hsin-Chieh Lee, Yun-Chen Yu, Ibrahim Althamary, Rongxing Lu, Phone Lin
Organizations: Department of Communication Engineering, National Central University, Taoyuan City 320317, Taiwan · Interdisciplinary Research Center for Intelligent Secure Systems, King Fahd University of Petroleum and Minerals (KFUPM), Dhahran 31261, Saudi Arabia · School of Computing, Queen’s University, Kingston, ON K7L 2N8, Canada · Department of Computer Science and Information Engineering, the Graduate Institute of Networking and Multimedia, the Graduate Institute of Biomedical Electronics and Bioinformatics, the Internet of Things Research Center, and the Graduate Institute of Medical Device and Imaging, National Taiwan University, Taipei City 10617, Taiwan
Multi-agent reinforcement learning supports cooperative decision-making in Internet of Things systems, but strategic deviations can disrupt coordination and undermine confidence in the training process. This paper proposes Blockchain-Enabled Centralized Training and Decentralized Execution (BE-CTDE), which uses blockchain as an active training-management layer. A behavioral verifier compares executed trajectories with shared-policy recommendations; its flags drive a token mechanism combining slashing, burning, rewards, and compensation. Retained balances determine each agent's contribution to the global policy update, connecting auditable behavior to learning influence. We derive a one-round incentive condition that accounts for action-dependent compensation and the payoff from deviation, and a finite expected exclusion-time bound under explicit conditional detection and accounting assumptions, showing perfect detection is unnecessary. An exact finite-population capacity bound characterizes the limits of the population-relative detector. In multi-agent path finding experiments, BE-CTDE outperforms a state-of-the-art learning-based path planner with substantially higher success rates under attack, even when adversaries form the majority. It also outperforms partially defended baselines in all configurations, with collision rates up to 35% lower than under detection without economic consequences and up to 43% lower than under conventional stake slashing. Together, these results characterize how behavioral verification and token feedback can support accountable cooperative learning.
Figures & tables
References
Blockchain
MARL
On-chain Parameters
On-chain Learning
Incentive Mechanism
Token-based Economy
Data Verification
Malicious Agent Detection
[ 16 , 17 ]
Simulator
–
✓
✓
✓
✓
✓
–
[ 20 ]
Simulator
–
✓
–
✓
✓
✓
✓
[ 18 ]
Real
–
✓
–
✓
✓
✓
✓
[ 21 ]
Simulator
✓
✓
–
✓
–
✓
–
[ 19 ]
Real
–
✓
✓
✓
✓
–
–
[ 22 ]
Simulator
✓
✓
–
✓
–
✓
✓
TABLE I: Functional comparison of AI and blockchain integration across recent literature
Fig. 1: BE-CTDE system architecture: IoT agents interact with the environment through observations ot , rewards rt and actions at , while the blockchain layer coordinates training, verifies behavior and manages token incentives. Neural-network computation remains off-chain.
Symbol
Definition
System and learning
N,nt,M,Mt
Initial, active, initially malicious, and active malicious counts ( M<N )
Kt,H,M,fi(t)
Retained, honest, malicious sets and detection flag
S,A,O
State, joint-action, and joint-observation spaces
Ω,P,R,γ
Observation map, transition/reward functions, and discount factor
(o,a,r,m)i,t
Observation, action, reward, and prior message of agent i
TABLE II: Principal Notation
Fig. 2: BE-CTDE training workflow and shared-policy architecture. Neural inference, communication, advantage estimation and PPO run off-chain (orange), while behavioral verification and token settlement run on-chain (blue); document icons mark results committed to the chain.
N
Fmax(N)
M/N=3/8
M/N=5/8
8
2
0.6667
0.4000
32
9
0.7500
0.4500
64
19
0.7917
0.4750
128
39
0.8125
0.4875
TABLE III: Initial detector capacity at k=1.5 . The last columns bound the realized fraction of adversaries flagged in one round at the stated initial ratios; they are not conditional detection guarantees.
Parameter
Value
Training environment
Grid; number of agents
40×40 ; 8
Start and goal assignment
Random unique positions
Training adversaries
3 or 5 of 8 agents
Obstacle density
Triangular (0,0.33,0.50)
Episodes; maximum steps
1,838; 256 per episode
TABLE IV: Simulation Parameters
Fig. 3: Policy-loss and goal-arrival curves with three malicious agents during training. The horizontal axis is the recorded training-step counter; the curves measure learning progress, not exclusion events.
37.5% malicious agents
62.5% malicious agents
N
Method
0%
15%
30%
0%
15%
30%
8
On-Chain CTDE
2.45
3.09
3.67
49.67
58.50
69.72
BE-CTDE λ=0
9.52
18.14
29.63
13.51
29.16
37.08
BE-CTDE λ=0.5
7.81
16.35
25.82
13.06
26.22
37.42
BE-CTDE λ=1
7.42
15.30
20.79
11.96
24.84
35.20
32
On-Chain CTDE
10.41
15.83
18.69
74.04
79.71
82.53
TABLE VI: Test-time collision rate (CO, %) with adversaries during training only and honest agents during testing. Columns under each training ratio correspond to obstacle densities 0% , 15% , and 30% . λ=0 is the burn-only BE-CTDE variant.
Fig. 4: SR comparison with adversaries during training and honest testing. Rows show obstacle densities 0%, 15% and 30%; columns show training-time malicious ratios 37.5% and 62.5%.
Learned communication improves coordination in cooperative multi-agent reinforcement learning, but it also creates a trust problem: a trained policy may route information through agents that have become faulty or adversarial. This paper studies Byzantine-agent detection for learned-communication MARL in adaptive traffic signal control. We propose BARD-MARL, a post-hoc diagnostic layer on top of BayesG, which is used as an attributed communication substrate rather than as a contribution of this paper. BARD-MARL combines two agent-level evidence streams: policy-graph features extracted from state-action trajectories and Bayesian trust statistics computed from BayesG latent mask probabilities. Across fixed-action, observation-flip, random-noise, and coordinated attacks in SUMO traffic grids, the results show that these signals are complementary rather than universally dominant. On a 25-agent grid, BARD-MARL reaches 0.843 AUC-ROC under a 10% observation-flip attack, while policy-graph-only detection reaches 0.917 AUC-ROC under a 10% coordinated attack. On a 100-agent grid, the unified BARD-MARL variant reaches 0.982 AUC-ROC for both 10% fixed-action and 10% coordinated attacks. The study shows that learned communication policies expose useful diagnostic evidence, but credible resilience claims require attack-specific ablations and explicit separation between coordination, detection, and mitigation.
Almond Kiruthu Murimi
Carnegie Mellon University Department of Electrical and Computer Engineering Pittsburgh, Pennsylvania, United States
Large language model (LLM)-based multi-agent systems (MAS) predominantly rely on centralized orchestration and lack formal verification mechanisms for agent reliability, participation, and system-level behavioral alignment. These shortcomings leave open environments severely vulnerable to uncooperative or malicious agents. This work proposes DART, a Directed Acyclic Graph (DAG)-based reputation and incentive regulation framework for trustworthy multi-agent collaboration, combining centralized operational orchestration with blockchain-enabled decentralized governance and accountability. DART unifies DAG workflow orchestration, capability and reputation-aware task allocation, dynamic behavior updates, multi-factor incentives, and smart contract accountability paired with IPFS storage. Under this paradigm, agent selection dynamically balances task alignment, historical reputation, and workload, while post-execution behavioral evidence continuously calibrates agent trust and the probability of future participation. Evaluated across four axes, DART achieves 93.6% Pass@1 on GSM8K and builds a full-stack application in 142 s using two agents, outperforming centralized baselines. Across five independent 150-round longitudinal trials, Full DART achieves a mean task success rate of 93.33 +/- 2.26%, output quality of 0.9357 +/- 0.0117, retry rate of 0.2307 +/- 0.0816, and allocation delay of 1.1153 +/- 0.0408 s, consistently outperforming its ablated configurations DART isolates persistent and intermittent malicious agents, obtaining a 99.3% output containment rate and restoring system success to 99.8%. These results demonstrate the potential of coupling reputation, incentives, DAG-based coordination, and verifiable blockchain-enabled governance to support adaptive and accountable multi-agent collaboration.
Manoj Kumala, Xinyun Liua, Ronghua Xu
Department of Applied Computing, Michigan Technological University, Houghton, MI 49931, USA
In Decentralized Training and Decentralized Execution (DTDE) for cooperative Multi-Agent Reinforcement Learning (MARL), action-advising-based knowledge sharing promotes interpretable and scalable cooperation among agents. However, current action advising approaches often adhere too much to the teacher's guidance without evaluating teacher-student compatibility, which causes excessive advising, suboptimal stability, and degraded performance. To overcome these challenges, this paper presents a Consensus-based Communication and Knowledge Sharing (CCKS) framework, which allows agents to adopt recommendations based on consensus-derived constraints and to follow the teacher's instructions more smartly. This mechanism enables agents to balance exploration and learning from experienced teachers, improving overall performance. The key is the consensus model construction, for which we propose to employ contrastive learning to construct consensus models based on local observations in the agents' training phase. In action selection, agents score and choose actions based on consensus and shared knowledge. Designed as a plug-and-play solution, CCKS integrates seamlessly with existing DTDE algorithms. Experiments conducted in the Google Research Football environment and the complex StarCraft II Multi-Agent Challenge demonstrate that the integration with CCKS significantly improves cooperation efficiency, learning speed, and overall performance compared with current DTDE baselines. The code is available at https://github.com/yuanxpy/CCKS.
Jinyuan Zu, Xiaowei Lv, Yongcai Wang +5
School of Information, Renmin University of China, Beijing 100872, China · State Key Laboratory of Multimodal Artificial Intelligence Systems, Beijing Engineering Research Center of Intelligent Systems and Technology, Institute of Automation, Chinese Academy of Sciences, Beijing 100190, China · The Information Science Academy, China Electronics Technology Group Corporation, Beijing 100043, China +1