DARPA has launched the Intrinsic Market Resilience (IMR) program, a new effort to build AI tools that can model digital market systems, probe their rules for exploitable design flaws, and suggest fixes before adversaries can weaponize those flaws for economic disruption. The program targets electronic markets across equities, bonds, energy, and cloud computing resources. The threat model here is not hacking or data theft — those are established problems with established defenses. IMR focuses on a subtler vulnerability: the possibility that an adversary could operate entirely within the rules of a market system and still cause catastrophic damage by exploiting structural weaknesses in market design itself. Program manager Matthew Wilding frames AI as a double-edged sword: the same advances in automated reasoning that lower the barrier for attackers can also be turned toward defense. DARPA cites two historical precedents. In the early 2000s, traders exploited California's newly deregulated energy market, triggering a crisis that cost an estimated $40-45 billion and forced the federal government to invoke the Defense Production Act to secure natural gas for military installations. In 2010, the Flash Crash saw U.S. equities plunge within minutes, later attributed in part to one individual's manipulative trading that exploited a specific market design feature — spoofed sell orders deliberately designed never to execute, at zero cost to the manipulator. The program's technical approach involves using large language models to ingest regulatory filings and technical specifications, then converting them into computational models describing how markets function and interact. When these models cannot prove a market meets specific resilience standards, they are designed to generate concrete counterexamples — specific failure scenarios that expose weaknesses and point toward fixes. IMR reflects a broader shift in national security thinking: that future attacks on the United States may bypass military targets entirely, instead exploiting vulnerabilities in digital infrastructure, supply chains, or market mechanisms. The proliferation of AI and the growing interconnection of electronic markets simultaneously increase both the attack surface and the potential scale of damage. The program draws a clear distinction between its mission and traditional financial regulation. The SEC and CFTC pursue market manipulators seeking financial profit. DARPA is focused on adversaries whose goal is disruption itself — actors who may operate in gaps where existing legal and regulatory frameworks provide no protection. This is market security as a defense problem, not a compliance problem. Whether DARPA can actually deliver tools capable of formally verifying market resilience against adversarial exploitation remains an open question. Markets are adaptive systems with emergent behaviors that resist formal modeling. But the framing itself is significant: the Pentagon is now treating market design flaws as national security vulnerabilities on par with cyber intrusions.
