Personal transaction routing is commonly offered as the reply to MEV sandwich assaults. If a transaction is hidden from the general public mempool, an attacker can not see it in time to commerce earlier than and after it.
Latest analysis makes that reply much less comfy.
One examine inspecting Ethereum transactions from late 2024 recognized 2,932 personal sandwich assaults affecting 3,126 personal sufferer transactions. It discovered that customers usually moved to non-public routing after being attacked publicly, however concluded that personal channels didn’t assure safety. Sandwiched and Silent
One other examine reached a extra encouraging however narrower conclusion. Throughout the personal Layer 2 mempools it examined, sandwich assaults have been uncommon, usually unprofitable and largely absent. With no public mempool and builder market, attackers had much less certainty that the transactions wanted for a sandwich can be included within the right order. The way to Serve Your Sandwich?
These findings usually are not essentially contradictory. Personal routing could make a sandwich assault a lot more durable to coordinate. It doesn’t make each transaction, personal channel or execution setting immune.
On the similar time, the authorized standing of some MEV conduct stays unsettled. In 2025, a federal jury couldn’t attain a verdict within the case in opposition to Anton and James Peraire-Bueno. Prosecutors accused the brothers of exploiting Ethereum’s MEV-Enhance infrastructure to take roughly $25 million from buying and selling bots in 12 seconds. The protection argued that their conduct was a reputable buying and selling technique in a aggressive market. The decide declared a mistrial after the jury did not agree on how fraud regulation utilized to the conduct. Reuters
The brothers weren’t accused of finishing up a standard sandwich assault in opposition to bizarre DEX customers. They have been accused of deceiving bots that have been themselves pursuing MEV alternatives. The case nonetheless uncovered how troublesome it’s to attract a clear authorized boundary round transaction ordering, adversarial buying and selling and onchain manipulation.
Collectively, the analysis and the courtroom case deliver us again to a extra helpful query:
What does an attacker really must revenue from a sandwich assault, and what prevents the commerce from working?
TL;DR
A sandwich assault locations one transaction earlier than a consumer’s commerce and one other after it, utilizing the consumer’s transaction to make the sequence worthwhile.The attacker wants greater than visibility. The sufferer’s commerce should nonetheless execute after the attacker strikes the value.Commerce dimension relative to liquidity, pool charges and the consumer’s execution limits all have an effect on whether or not an assault is worthwhile.Personal routing can cut back an attacker’s visibility and management over transaction ordering, however it’s not a common assure.“MEV mitigation,” “MEV-resistant,” “MEV safety” and “sandwich immunity” don’t imply the identical factor.Carbon DeFi maker orders present sandwich immunity as a result of the maker defines the executable value and can’t be pressured to simply accept a worse one.
What Is an MEV Sandwich Assault?
MEV, or Maximal Extractable Worth, refers to worth that may be captured by controlling, anticipating or influencing the order by which blockchain transactions execute.
A sandwich assault is one type of MEV. It locations a sufferer’s commerce between two attacker transactions:
Entrance-run: The attacker trades earlier than the sufferer, transferring the market value in opposition to them.Sufferer transaction: The sufferer’s commerce executes on the manipulated value and receives fewer tokens than initially quoted.Again-run: The attacker reverses the primary commerce after the sufferer’s transaction and retains the distinction.
The attacker’s revenue comes on the consumer’s expense. The pool might finish the sequence close to its earlier state, however the consumer has already traded at a worse value.
Our earlier article, Understanding MEV Sandwich Assaults: Regularly Requested Questions, explains this course of and the function public mempools, automated market makers and slippage play in making customers susceptible.
What Does an Attacker Want for a Sandwich Assault to Work?
Seeing a pending transaction is barely the start. A worthwhile sandwich additionally requires the fitting financial and execution circumstances.
The attacker must anticipate the sufferer’s commerce and get one transaction forward of it and one other behind it. The value motion created by the sufferer should be massive sufficient to cowl the attacker’s pool charges, fuel prices and different execution bills.
The scale of the sufferer’s commerce issues, however not by itself. A $100,000 commerce could be comparatively small in opposition to deep liquidity and massive in opposition to a shallow pool. What issues is the scale of the commerce relative to the liquidity out there on the costs it’s going to cross.
Most significantly, the sufferer’s transaction should stay legitimate after the attacker modifications the pool state. If the transaction rejects the manipulated consequence, the attacker loses the sufferer commerce wanted to finish the worthwhile sequence.
That’s the place slippage tolerance and minimal return enter the assault.
What Does Slippage Should Do With Sandwich Assaults?
When customers submit swaps to an AMM, they normally specify the utmost distinction they may settle for between the quoted consequence and ultimate execution. That is generally known as slippage tolerance.
The transaction additionally accommodates a minimal return: the smallest quantity the consumer is prepared to obtain earlier than the commerce should fail.
If the consumer accepts a large distinction between the preliminary quote and minimal return, an attacker might have room to maneuver the worth whereas retaining the sufferer’s transaction executable. The attacker makes an attempt to push the commerce towards the worst consequence the consumer has already agreed to simply accept, then back-runs it.
A tighter minimal return leaves much less room. If the attacker’s front-run pushes the consequence under that restrict, the sufferer’s transaction reverts and the sandwich now not works as deliberate.
This doesn’t imply each transaction ought to merely use zero slippage. Costs can transfer naturally earlier than a transaction executes, notably in unstable or illiquid markets. A restrict that’s too tight may cause a reputable commerce to fail. The consumer is balancing profitable execution in opposition to the quantity of value deterioration they’re prepared to settle for.
When Does a Sandwich Assault Turn into Unprofitable?
In The Forbidden Sandwich: A Principle of MEV-resistant CFMM Transactions, Dr. Mark Richardson examined the circumstances underneath which the optimum front-running commerce turns into zero — in plain English, the purpose at which the most effective resolution out there to the attacker is to go away the transaction alone.
The evaluation identifies three relationships:
For a given commerce dimension and liquidity reserve, there’s a pool payment excessive sufficient to eradicate the attacker’s revenue.For a given liquidity reserve and pool payment, there’s a most commerce dimension under which an assault has no worth.For a given commerce dimension and pool payment, there’s a liquidity reserve deep sufficient to eradicate the chance.
The central perception is that absolute commerce dimension is just not the deciding issue. The vital relationship is the commerce dimension in contrast with the pool’s reserves.
A bigger commerce strikes additional by means of a shallow pool’s curve and creates extra potential value motion for an attacker to take advantage of. Deeper liquidity reduces the impact of the identical commerce. Larger pool charges improve the price of finishing either side of the assault.
These circumstances could make an assault mathematically unprofitable inside the mannequin, however that doesn’t robotically flip them into sensible protections. Elevating charges sufficient to discourage an attacker can even make the consumer’s personal commerce costly. Breaking a big commerce into smaller transactions might cut back the worth of every particular person alternative, however it might probably create extra transactions to watch and execute. Including liquidity is just not one thing a person dealer can demand in the intervening time of a swap.
Minimal return takes one other strategy. As an alternative of adjusting the pool’s economics, it constrains the consequence the consumer will settle for. If the manipulated commerce now not satisfies that situation, it can not execute.
MEV safety is commonly described as if each methodology offers the identical consequence. It doesn’t.
What Do “MEV-resistant,” “MEV Safety” and “Sandwich Immunity” Imply?
The trade makes use of a number of overlapping phrases for very completely different claims.
MEV mitigation
MEV mitigation is the broadest and most cautious time period. It describes methods meant to scale back MEV publicity, frequency or severity. Personal routing, transaction batching, fair-ordering techniques and tighter slippage settings can all fall into this class.
Mitigation doesn’t promise that extraction is unimaginable.
MEV safety
MEV safety is the language customers are most definitely to come across in wallets, RPC companies and buying and selling interfaces. It’s an umbrella time period quite than a constant technical customary.
One product might use “safety” to imply that it routes a transaction away from the general public mempool. One other might simulate transactions, prohibit slippage, run an public sale or reimburse sure losses. The safety can solely be evaluated as soon as the mechanism and its limitations are defined.
MEV-resistant or sandwich-resistant
Researchers and protocol builders usually use “MEV-resistant” or “sandwich-resistant” to explain a design that makes an assault harder or unprofitable underneath said circumstances.
Resistance is just not essentially immunity. A system can resist one route, adversary mannequin or transaction-ordering setting whereas remaining susceptible underneath one other. The assumptions are a part of the declare.
MEV prevention
Prevention usually means stopping a selected assault from succeeding. It could apply to 1 transaction path or class of assaults with out addressing each type of MEV.
Sandwich immunity
Immunity is the strongest and most particular declare. For a transaction to be sandwich-immune, an attacker can not worsen that consumer’s execution by inserting transactions round it.
Any declare of immunity ought to state precisely which consumer, transaction sort and execution mechanism it covers. Saying {that a} protocol is broadly “MEV immune” can be a lot wider than saying its maker orders are proof against sandwich assaults.
Does Personal Routing Stop Sandwich Assaults?
Personal routing addresses visibility and transaction ordering. As an alternative of broadcasting a transaction to the general public mempool, it sends the transaction by means of a personal relay, builder or sequencer path.
That may take away the simplest alternative for public bots to look at and front-run the commerce. It might additionally cut back the knowledge that an attacker’s front-run, sufferer transaction and back-run will all execute within the required order.
The current research present why the reply nonetheless is determined by the system being examined.
The analysis on personal Ethereum transactions discovered documented personal sandwiches and vital focus amongst attackers. The Layer 2 examine discovered that assaults within the personal mempools it examined have been uncommon and customarily uneconomic as a result of attackers couldn’t assure the identical atomic ordering out there in Ethereum’s builder market.
Personal routing can subsequently present significant mitigation. It shouldn’t be handled as proof that the commerce itself can’t be manipulated.
A personal route asks: Can the attacker see and place round this transaction?
An execution constraint asks: What result’s this transaction permitted to settle for?
Is MEV Unlawful?
MEV is a class of transaction-ordering conduct, not one particular act. It contains actions akin to arbitrage and liquidations in addition to methods that extract worth from different customers.
That makes “Is MEV authorized?” too broad to have one reply. The related questions are what the actor did, whether or not deception or unauthorized entry was concerned, who suffered the loss and which legal guidelines apply within the related jurisdiction.
The Peraire-Bueno prosecution illustrates the uncertainty. Prosecutors characterised the alleged conduct as a misleading scheme concentrating on buying and selling bots. The protection described it as a reputable technique that outmaneuvered different bots in an adversarial market. After a four-week trial, the jury couldn’t agree on whether or not the conduct met the authorized necessities for wire fraud and cash laundering, and the courtroom declared a mistrial.
That consequence was not a discovering that the conduct was authorized. It additionally didn’t set up that sandwich assaults are categorically unlawful. It left the central authorized query unresolved.
For customers, that unresolved standing provides little safety. A commerce can lose worth to transaction manipulation no matter whether or not a courtroom later decides that the attacker dedicated a crime.
How Carbon DeFi Offers Sandwich Immunity for Makers
The approaches mentioned above largely concentrate on defending a consumer who submits a swap in opposition to an present pool value.
Carbon DeFi makers function in a different way. A maker creates an onchain order and defines the precise value or pricing curve at which their tokens can be found. The maker is just not asking an AMM to calculate a brand new execution value after earlier transactions have modified a shared pool state.
Somebody can commerce in opposition to the maker’s order, however they can’t drive the maker to simply accept a worse value. If the order fills, the maker receives the consequence encoded within the order.
That’s the reason Carbon DeFi describes its maker orders as proof against sandwich assaults quite than merely resistant. The declare is particular: a front-runner can not worsen the maker’s execution value by buying and selling earlier than and after the fill.
This safety is native to the order’s execution. It doesn’t depend upon a personal relay, oracle, keeper or hook. Carbon DeFi’s built-in solver helps orders get found and crammed utilizing liquidity from main DEXs chainwide, however the maker’s value stays the maker’s value.
For a broader introduction to the mechanism, see Understanding MEV Sandwich Assaults: Regularly Requested Questions. For the mathematical relationship amongst charges, liquidity depth and transaction dimension, see The Forbidden Sandwich: A Principle of MEV-resistant CFMM Transactions.
The Limits of Safety
Mitigation, safety, resistance and prevention differ in diploma, however all of them describe the identical normal goal: decreasing the probability or affect of an assault. They specific an intention — a hope that the safeguards are ample underneath the circumstances by which they function.
Immunity describes a technical limitation.
For a Carbon DeFi maker order, the protocol permits two outcomes: the order executes in response to the maker’s predefined value, or it doesn’t execute at all.
Bancor
Bancor is a pioneer in decentralized finance (DeFi), established in 2016. It invented the core applied sciences underpinning the vast majority of at this time’s automated market makers (AMMs) and continues to develop the foundational infrastructure crucial to DeFi’s success — specializing in enhanced liquidity mechanics and sturdy onchain market operation. All merchandise of Bancor, together with Carbon DeFi and the Arb Quick Lane, are ruled by the Bancor DAO.
Carbon DeFi — Powered by Bancor’s newest patented applied sciences: Uneven Liquidity and Adjustable Bonding Curves.
Reside on Ethereum, Sei, Celo, COTI, and TAC.
The Arb Quick Lane — Carbon DeFi’s built-in solver system and DeFi’s most superior arbitrage infrastructure, powered by Marginal Worth Optimization, a brand new methodology of optimum routing.
Web site | MCP Server | Weblog | X/Twitter | YouTube | Governance
MEV Sandwich Assaults: Personal Routing, Worth Manipulation and the Limits of Safety was initially revealed in Bancor on Medium, the place persons are persevering with the dialog by highlighting and responding to this story.
