MEV and Sandwich Attacks: What Happens to Your Trade Before It Confirms

When you submit a swap on a decentralized exchange, you accept a slippage tolerance and wait for confirmation. In that window - measured in seconds - your transaction is publicly visible to automated systems built to extract profit from it.

This is MEV: Maximal Extractable Value. It operates on every major public blockchain, and it affects every trade above a minimum profit threshold for the bots running it.

What MEV Is

Public blockchains process transactions in two stages. First, a pending transaction is broadcast to a network of nodes and sits in a staging area called the mempool. Then a block proposer selects which transactions to include and in what order.

MEV refers to the value that can be extracted by controlling that ordering. Block proposers - validators on Ethereum, miners on proof-of-work chains - have the technical power to reorder, include, or exclude transactions within a block. This power has economic value, and a significant industry has formed around extracting it.

The mempool is readable by anyone. Bots process thousands of pending transactions per second, scanning for predictable, profitable patterns.

How a Sandwich Attack Works

The sandwich attack is the most common form of retail-facing MEV. The sequence is mechanical:

1. A bot identifies a large pending swap in the mempool - for example, a buy of $50,000 worth of a token on a DEX.
2. The bot submits a front-run transaction: it buys the same token with a higher gas fee, ensuring its transaction lands before yours in the block.
3. Your trade executes. The bot's earlier buy has already pushed the price up. Your buy pushes it further.
4. The bot immediately submits a back-run transaction: it sells the tokens it just bought, now at a higher price, into the liquidity your trade created.

The bot entered before you and exited after you. You bought at an elevated price. The bot captured the spread.

The entire sequence happens within a single block - on Ethereum, that is a 12-second slot. The bot's position is held for less time than most traders spend reading a price chart.

The profit is nearly risk-free from the bot's perspective. Your transaction is already in the block. The bot knows your trade size, the token pair, and exactly how much price impact you accepted. Your slippage tolerance setting is the bot's profit ceiling - it will extract up to that limit.

Why Slippage Settings Matter More Than Most Traders Realize

A slippage tolerance setting is usually understood as a safeguard against failed transactions. Set it too tight and your trade fails if the price moves. Set it too loose and you accept a wider execution range.

The less visible effect is that a loose slippage setting is a public signal to MEV bots about how much they can extract from your trade. A 5% slippage setting on a $10,000 swap communicates that up to $500 can be taken before your transaction reverts. The bot reads this directly from the mempool.

Tighter slippage reduces MEV exposure but increases the chance your transaction fails during periods of natural price movement. The two risks run in opposite directions.

Scale and Trade Size

MEV is not only a large-trader problem. A $500 swap on a low-liquidity token pair with 5% slippage is still a viable sandwich target if the bot's gas cost is covered by the profit margin. In practice, the risk scales with three factors:

Trade size relative to pool depth. A large trade in a shallow liquidity pool creates significant price impact. That impact is what the bot captures. A small trade in a deep pool barely moves the price and is not worth sandwiching.

Slippage tolerance. Higher tolerance means more extractable value per transaction.

Volatility conditions. During high-volatility periods, more traders submit urgent transactions with loose slippage settings. MEV activity concentrates in these windows.

In early 2024, during elevated ETH volatility, on-chain analysts documented a consistent pattern on Uniswap V2 pools for mid-cap tokens. Large buys in the $30,000 to $80,000 range with 2-3% slippage were systematically sandwiched within the same block. Individual losses per trade were in the hundreds of dollars - below the threshold of immediate notice, but significant in aggregate.

Annual MEV extraction on Ethereum has been estimated in the billions of dollars across all forms.

Other Forms of MEV

Sandwich attacks are the most visible, but MEV takes several other forms:

Liquidation MEV: When a DeFi position becomes undercollateralized, bots race to trigger and capture the liquidation bonus before other bots.

Arbitrage MEV: User trades create temporary price differences between DEX pools. Bots close these gaps, capturing the spread. This is generally considered a neutral market function, but it still extracts value from the conditions that user trades create.

Just-In-Time (JIT) liquidity: Bots add liquidity to a pool immediately before a large trade and remove it immediately after. They collect the swap fee without bearing any duration risk as a normal liquidity provider would.

All three share the same foundation: the mempool is public, block ordering is controllable, and that combination creates extractable value at scale.

Tools That Reduce MEV Exposure

MEV is a structural feature of public blockchains, not a bug that can be patched. Several tools exist to reduce exposure for traders who are aware of it.

Private mempool routing. Services like Flashbots Protect route transactions directly to block builders without broadcasting them to the public mempool. This removes the front-running window entirely. The tradeoff is reliance on a specific relay and slightly different confirmation dynamics.

DEX aggregators with MEV protection. Aggregators such as 1inch and Paraswap have implemented routing that splits orders across pools or uses private relay infrastructure. The protection is partial but measurable.

Slippage management. Using the minimum slippage that allows your transaction to succeed reduces the extractable margin on any individual trade. This requires more attention to current market conditions but directly limits MEV exposure.

None of these tools eliminate MEV. They reduce the surface area available for extraction on specific transactions.

What This Means for On-Chain Traders

MEV is one of those mechanisms that does not appear in standard transaction cost calculations but affects execution quality on every significant DEX trade. The gas fee and the swap fee are visible. MEV extraction is not - it shows up as receiving slightly fewer tokens than the quoted price would imply.

Understanding the mechanics changes a few practical decisions: how slippage settings are chosen, how trade size relates to pool depth, and whether private routing tools are worth using on high-value transactions.

On a public blockchain, a pending transaction is readable, analyzable, and exploitable before it confirms. The mempool is not a neutral waiting area. It is a broadcast that sophisticated automated systems monitor continuously.

---

More market observations at https://swaphunt.dev