Cointime

Download App
iOS & Android

The Most Common Types of MEV and Protection From Toxic Strategies

Validated Project

MEV can be an effective mechanism for making profits in DeFi, but often, profits come at the expense of other users.

MEV refers to the maximal extractable value generated from reordering transactions within a block. While MEV originally stood for “miner extractable value,” after last year’s Ethereum Merge, which replaced miners with validators, the term was changed to “maximal extractable value.”

MEV opportunities

Block builders benefit from “priority” fees users are willing to pay to speed up their transactions. Meanwhile, so-called searchers can detect potentially lucrative transactions that could impact a crypto asset’s value, bringing them a profit. Then, they pay extra in order to slip in their transactions early in a block. Potentially vulnerable transactions could be detected in the mempool, the node’s holding area for submitted and unconfirmed transactions before they are added to a block. Those pending transactions, especially large ones that can potentially move market prices and create arbitrage opportunities, can become a target for malicious searchers.

On the one hand, MEV is an integral part of DeFi’s market environment and could be used for healthy profit strategies, as long as other users are not harmed. At the same time, when searchers take advantage of MEV opportunities in a toxic way, it can lead to other users’ losses, as well as increased transaction costs and other negative consequences.

Overall, MEV scenarios could be divided into those based on the source of extraction (DEX arbitrage, liquidation) and on the type of implementation (generalized front-running, front-running, back-running and sandwich attacks).

MEV sources

DEX arbitrage

The price of the same crypto asset can vary across different DEXes, and an arbitrageur, while simultaneously buying and selling on various markets, profits from the price difference. Basically, arbitrageurs are simply relying on natural price fluctuations. Meanwhile, front-running also happens in arbitrage. For instance, a searcher bot can find a pending transaction and insert its own transaction in front of it to extract the value offered by that arbitrage opportunity. A searcher can also create an artificial arbitrage opportunity by reordering transactions on a liquidity pair before a back-run (described below).

Liquidation

When a user takes out a collateralized loan, and, due to crypto volatility, the collateral’s value later falls below a specified figure, the liquidation of the loan takes place: the smart contract sells the collateral to cover the debt and allows any user to buy it. A MEV opportunity occurs when such a transaction is identified. A searcher’s liquidation transaction is inserted in the block before all other transactions, enabling the searcher to buy the liquidated collateral at the most advantageous price.

Also, when a trader tries to re-collateralize their loan, the transaction can be censored in the process of adding funds. At the same time, the liquidation might still continue allowing searchers to buy the original collateral at a discount.

MEV types

Generalized front-running

Searchers use mempool-tracking bots to identify profitable transactions. An attacker then replaces the address of a potentially profitable transaction with their address and checks whether it is lucrative by running the transaction locally. If the result is favorable, the transaction with the replaced address will front-run the original transaction by setting a higher gas price.

Front-running

Front-running occurs when a transaction similar to that made by a user is placed directly before it in a queue to be filled. By doing that, the front-runner impacts the prices of the swapped assets, making a profit at the expense of the victim, who ends up receiving a lower amount of the target token than expected.

Back-running

Conversely, back-running occurs when a transaction is inserted immediately after the target transaction to make a profit from the market fluctuations generated by a large transaction. Although, technically, back-running does not affect other traders, an active use of this tactic can substantially increase transaction fees.

Sandwich attacks

One common form of front-running/back-running is a sandwich attack in which orders are placed before and after a target price-changing transaction, thus taking advantage of price pressure on both sides. The front-run transaction causes the movement of value. The victim’s transaction is executed at a new, less favorable price, and the final transaction captures the price difference, leaving the victim’s transaction front-run and back-run as if in a sandwich.

MEV protection with 1inch

While arbitrage and liquidations are generally neutral MEVs, traders can lose the entire amount of slippage tolerance as a result of front-running and sandwich attacks since users’ trades settle at a higher price than expected. 1inch makes sure that traders avoid the risk of being front-run or sandwiched.

In Fusion mode: Fusion swaps are performed by resolvers, with whom transactions are directly matched and then placed in a bundle with other orders to be included in the block. Bots cannot attack Fusion swaps since they are combined with other transactions.

In Legacy mode: Legacy mode does not involve resolvers and the transaction execution process follows a regular scenario. But the 1inch Wallet has long been featuring an opportunity for users to create and sign a transaction without broadcasting it to the mempool, where it could be visible to bots. In late 2022, 1inch’s frontrunning protection was stepped up by the introduction of the RabbitHole feature. With the 1inch RabbitHole, all swap transactions are sent directly to validators, bypassing mempools where sandwich bots could attack them.

Read more: https://medium.com/1inch-network/the-most-common-types-of-mev-and-protection-from-toxic-strategies-53ec43202e12

Comments

All Comments

Recommended for you

  • U.S. Spot Bitcoin ETF Sees $2.39 Billion Net Inflow in a Week, Highest Since 2026

    On September 26, BeInCrypto reported that the U.S. spot Bitcoin ETF experienced a net inflow of $2.39 billion this week, marking the largest single-week net inflow since 2026. According to SoSoValue data, the week started with an inflow of $998.95 million on September 21, but subsequently declined daily to $134.47 million by Friday, approximately 87% lower than Monday. Nonetheless, funds continued to flow in for the seventh consecutive trading day. The significant inflow on Monday followed a 6.7% surge in Bitcoin, which led to about $262 million in short positions being liquidated within an hour. A global business survey by S&P on September 23 indicated that the U.S. economy is growing at its fastest pace since July 2021, with the 10-year U.S. Treasury yield surpassing 5%, causing Bitcoin to drop below $84,000 within an hour. The total assets of the ETF currently stand at $108.42 billion.

  • Riot Repays Coinbase Loan Early and Terminates $200 Million Bitcoin Collateral Credit Line

    On September 26, according to U.S. SEC filings, Bitcoin mining company Riot Platforms (NASDAQ: RIOT) voluntarily repaid all outstanding loans to Coinbase Credit on September 21 and terminated its $200 million credit line, while also releasing the lender's claim on the collateralized Bitcoin. Riot paid the full principal and accrued interest, incurring no early termination fees or penalties, and Coinbase's subsequent lending commitments were also terminated. The credit line, revised in April 2026, carried a fixed annual interest rate of 6.15% with a maturity date extended to April 20, 2027, and Riot had previously fully drawn the amount. At this rate, the annual interest on the $200 million balance is approximately $12.3 million. As of June 30, Riot had pledged 5,821 Bitcoins as collateral, valued at about $340.7 million, which accounted for approximately 51% of its total holdings of 11,380 Bitcoins at that time; the collateral also included USDC and cash held in Coinbase Custody Trust. This credit line was initially established in April 2025 for $100 million with a variable interest rate; it was doubled to $200 million the following month with a one-time fee of $1 million. Since the window for early termination fees specified in the agreement closed on August 21, no fees were required for the repayment in September. Riot is simultaneously expanding its data center operations, having announced in August a 20-year lease agreement with an unnamed AI developer for 191 megawatts of computing power at its Rockdale facility, which is expected to generate approximately $9.1 billion in initial revenue.

  • Trump: 'Super Intelligence' is a More Fitting Term than 'Artificial Intelligence'

    On September 26, U.S. President Trump stated: 'Super Intelligence' is a more fitting name. This name is more accurate because the term 'Artificial' often implies 'false' or 'not real'; however, it (Artificial Intelligence) is not a false entity, but rather an extremely powerful form of intelligence.

  • US and China Reach Agreement to Cut Tariffs on $30 Billion in Goods

    On September 26, the United States and China reached an agreement to reduce tariffs on $30 billion worth of goods following talks between President Xi Jinping and US President Donald Trump. (Watcher.Guru)

  • BTC Surpasses $84,000

    Market data shows that BTC has surpassed $84,000, currently priced at $84,015.64, with a 24-hour increase of 0.31%. The market is experiencing significant volatility, so please ensure proper risk management.

  • Trump Rejects Iran's Proposal to Reopen the Strait of Hormuz

    On September 26, U.S. President Trump stated that he has rejected Iran's proposal to reopen the Strait of Hormuz. In a media interview, Trump emphasized that the U.S. has complete control over the Strait of Hormuz, through which a significant amount of oil is flowing. Iran seeks to reach an agreement to immediately reopen the Strait, but 'I have rejected their proposal.' (Xinhua News Agency)

  • Iran's Supreme Security Council Denies Plans for Military Action Due to Flight Ban

    According to Iranian state media: Iran's Supreme Security Council has denied plans for military action in response to the ban on Iranian flights.

  • Analysis: Global Debt Continues to Rise, Bitcoin Benefits from Declining Fiat Currency Purchasing Power

    On September 26, Forbes reported that Bitcoin approached $90,000 earlier this month. Meanwhile, global debt continues to rise, and the 'currency devaluation trade' surrounding the decline in fiat currency purchasing power has become one of the factors driving up assets like Bitcoin and gold. According to the Institute of International Finance (IIF), global debt increased by $10 trillion in the first half of this year, surpassing $365 trillion in total. U.S. debt has exceeded $40 trillion, with annual interest payments rising to $1.27 trillion, surpassing defense and Medicare expenditures, and only falling behind Social Security spending. The IIF warns that as benchmark interest rates rise, interest costs will also increase. Nic Puckrin, founder of Coin Bureau and cross-asset analyst, stated that the current environment is favorable for 'currency devaluation assets' like Bitcoin and gold, which is partly why Bitcoin has seen recent gains. The larger the debt scale of major economies, the more likely it is to suppress real borrowing costs and allow inflation to erode the real value of debt, thereby enhancing the attractiveness of such trades. Analysts from The Kobeissi Letter noted that the purchasing power of the dollar has declined by 23% since 2020, and U.S. inflation has been above the Federal Reserve's 2% target for 60 consecutive months.

  • Morgan Stanley Increases Bitcoin Holdings by 42.98 BTC, Total Holdings Reach 9,261 BTC

    On September 26, Morgan Stanley extracted 42.98 BTC, valued at approximately $3.6 million, from the Coinbase Prime hot wallet address through its spot Bitcoin exchange-traded fund MSBT. This brings Morgan Stanley's total Bitcoin holdings to 9,261 BTC, valued at approximately $779 million.

  • Goldman Sachs: Six Tech Giants Need to Generate $1.42 Trillion from 2028 to 2030

    On September 26, Goldman Sachs released a research report on the U.S. technology industry, conducting a quantitative analysis of the return on investment for large cloud providers as they continue to expand their capital expenditures in artificial intelligence (AI). The report focuses on six major U.S. tech companies: Alphabet, Amazon, Microsoft, Meta, Oracle, and SpaceX, and performs a stress test on their computing power investments from 2026 to 2027. Assuming an average upfront investment of approximately $42 billion per gigawatt (GW) of computing power, with 70% of capital expenditures allocated to hardware and 30% to data center construction, while incorporating conservative depreciation rules and ongoing operational costs, Goldman Sachs estimates that these six companies must collectively generate about $1.42 trillion in revenue from 2028 to 2030. This equates to approximately $11.6 billion in annual revenue per GW of computing power to achieve a 15% annualized return on invested capital (ROIC) for this round of AI computing investments. Goldman Sachs believes that the commercial value associated with different tokens varies, and the returns on AI capital expenditures will not be uniform. However, considering the market growth potential over the next 3 to 5 years, the firm still expects that capital invested in the AI sector over the next 18 months will maintain a good overall return on investment.