What Is an MEV Bot? Sandwich Attacks, Front-Running and How to Protect Yourself

Last updated: November 2026

What Is an MEV Bot?

An MEV bot is software that scans pending transactions and submits its own transactions in a specific order to extract profit from them. The profit it chases is called maximal extractable value, or MEV.

The Ethereum Foundation's developer documentation on ethereum.org (accessed November 10, 2026) defines MEV as "the maximum value that can be extracted from block production in excess of the standard block reward and gas fees by including, excluding, and changing the order of transactions in a block." The term originally meant "miner extractable value" in the proof-of-work era. After Ethereum moved to proof of stake, validators took over block building, so the name changed to "maximal."

In practice, most MEV is not captured by validators directly. According to the same ethereum.org page, it is captured by independent operators called searchers, who run bots that detect opportunities and pay high fees so validators include their transactions first. When people search for "mev bot crypto," they are usually talking about these searcher bots.

How MEV Bots See Your Trade Before It Happens

When you swap tokens on a decentralized exchange (DEX), your wallet signs the transaction and broadcasts it. On most chains, it then waits in a public waiting area (the mempool) until a block producer includes it. While it waits, anyone can read it: which token you are buying, how much, and the minimum amount you are willing to accept.

That last number is your slippage tolerance. If you set 10%, you are telling the whole network, "I will still accept this trade if I get 10% fewer tokens than quoted." An MEV bot reads that as a budget it is allowed to take.

Bots also compete on gas. A bot that wants to go before you pays a higher priority fee; one that wants to go right after you positions itself accordingly. If you are new to how those fees work, our explainer on crypto gas fees and why they get expensive covers the basics.

Types of MEV Bots

Not every MEV bot hurts users. The table below separates the main strategies by who pays the cost.

Arbitrage bots

Arbitrage is the oldest and most competitive form of MEV. If a token trades at two prices on two DEXes, a bot buys low and sells high. Ethereum.org cites a real transaction where a searcher turned 1,000 ETH into 1,045 ETH by exploiting a price difference between Uniswap and Sushiswap. Arbitrage pulls prices back in line across markets, which is useful, but the profit comes from liquidity providers whose pool price was stale. That leakage is one reason providing liquidity is riskier than it looks, alongside impermanent loss.

Liquidation bots

On lending protocols such as Aave or Maker, borrowers who drop below the required collateral ratio can be liquidated by anyone. Bots race to do it first and collect the liquidation fee. This keeps lenders whole, but if you borrow against volatile collateral, a bot will liquidate you seconds after you cross the threshold.

Front-running bots

A front-runner sees your pending transaction and gets its own version included first. Ethereum.org describes "generalized frontrunners" that simulate any profitable pending transaction, swap in their own address and resubmit it with a higher gas price. The concept is borrowed from traditional markets, where front running by brokers is illegal; on a public blockchain it is simply a feature of open transaction ordering.

Sandwich bots

A sandwich attack combines front-running and back-running around one victim. The bot buys the token just before your buy, which pushes the price up. Your trade then executes at that higher price and pushes it up further. The bot sells right after you, at the top. Ethereum.org states plainly that users who are sandwiched "face increased slippage and worse execution on their trades."

Back-running and sniper bots

Back-running on its own is mostly harmless to the trader: a bot arbitrages the price gap your large trade created. Sniper bots are a launch-specific variant: they monitor new pool creations and buy in the very first block a token becomes tradable, often before any human can click "swap."

Sandwich Attack Example: How Much Can You Lose?

The numbers below are an illustrative example we calculated ourselves using a simple constant-product pool (the x × y = k formula used by Uniswap v2-style DEXes), with trading fees and gas ignored to keep it readable. They are not data from a real transaction.

Setup: a newly listed token has a pool of 100,000 USDC and 1,000,000 tokens, so the starting price is $0.10. You want to buy with 5,000 USDC.

Two lessons come out of this table. First, even without a bot, a 5,000 USDC buy in a 100,000 USDC pool already moves the price about 10% (you pay an average of $0.105 per token). Thin liquidity is expensive on its own. Second, your slippage setting caps the damage. At 10%, the bot can take roughly nine times what it can take at 1%. At 1%, the bot's profit can fall below its gas and fee costs, so many bots skip the trade entirely.

How MEV Bots Hurt Retail Traders

The cost of MEV rarely shows up as a line item. It shows up as:

• Worse execution price. You receive fewer tokens than the quote, right up to your slippage limit.
• Failed transactions. If you set slippage too tight during heavy bot activity, your swap reverts and you still pay gas on chains that charge for failed transactions.
• Inflated launch prices. Snipers buy the first blocks and sell into retail demand, so the "listing price" you see on a chart already includes their markup.
• Higher fees for everyone. Ethereum.org notes that bot gas auctions congest the network and push up gas prices for regular users.

How big is the problem overall? Estimates depend on who is counting. The MEV Blocker project (an Ethereum RPC originally built by CoW DAO, now run by Special Mechanisms Group) states on its website, accessed November 10, 2026, that "MEV bots have extracted more than $1.43 billion from well-meaning Ethereum users." CoW Protocol's documentation, accessed the same day, says MEV "is responsible for over a billion dollars in losses for everyday traders." Both come from projects that sell MEV protection, so treat them as industry estimates, not audited figures.

Why Newly Listed Tokens After an IDO Are the Biggest Target

The first minutes and hours after a token starts trading on a DEX combine every condition a bot wants:

1. Thin liquidity. Initial pools are often small relative to demand. As our illustration shows, small pools move a lot on each trade, and every move is profit for a sandwich bot. Our guide to liquidity pools on crypto launchpads explains how launch liquidity is usually set up.
2. Predictable timing. Listing times are announced in advance. Bots monitor the pool contract and can buy in the very block liquidity is added.
3. Panic slippage. When a buy fails, many users raise slippage to 20%, 30% or even 49% just to get filled. That is an open invitation to be sandwiched.
4. Emotional buyers. FOMO buyers rarely check the price impact line before confirming.

The result is a pattern many IDO investors recognize: the chart spikes in the first blocks, snipers and early sellers exit, and late retail buyers end up holding at the top. We break down the price side of this in why IDO gains vanish after TGE and the liquidity side in the IDO exit trap.

This is also the practical case for getting an allocation in the token sale itself rather than chasing the token on a DEX at listing. On the Kommunitas launchpad, participants who join a sale receive their allocation at the sale price, so they are not competing with sniper bots in the first block. That does not remove market risk after listing, but it removes the bot race at entry.

How to Protect Yourself From MEV Bots

You cannot make MEV disappear, but you can make yourself an unprofitable target.

1. Set a tight slippage tolerance

For liquid pairs, 0.5% to 1% is usually enough. For a new or thin token, check the price impact first. If the price impact alone is 5%, the fix is a smaller order, not 30% slippage. Avoid "auto" slippage settings that silently allow high values on volatile tokens.

2. Use an MEV-protected RPC

An RPC is the endpoint your wallet uses to send transactions. A protected RPC sends your transaction to builders privately instead of the public mempool, so sandwich bots never see it. On Ethereum, two widely used options are:

• Flashbots Protect: according to Flashbots documentation (accessed November 10, 2026), transactions go to a private mempool "hidden from frontrunning and sandwich bots," failed transactions are not included (so you do not pay for them), and users can receive MEV and gas refunds.
• MEV Blocker: its site reports more than $219 billion of volume protected across 62 million+ transactions, and pays users rebates when their transactions create back-running opportunities (figures as of November 10, 2026).

Add the RPC only from the project's official documentation, and double-check the chain ID. On Solana, MEV dynamics run through Jito's block engine; many Solana wallets and trading interfaces now offer a built-in MEV-protection toggle, so check your wallet's settings.

3. Use a DEX aggregator or intent-based swap with MEV protection

Some aggregators and intent-based protocols do not send your swap to the public mempool at all. CoW Protocol, for example, explains in its documentation that users sign an order and independent solvers compete to settle it at a uniform clearing price within a batch, which makes transaction order irrelevant for sandwich bots. Other major aggregators offer similar private routing; check that the feature is on for your chain.

4. Use limit orders

A limit order only executes at your price or better. A bot cannot push you into a worse fill, because the order simply waits. Many DEXes and aggregators support on-chain or off-chain limit orders.

5. Split large orders and avoid the first minutes

Smaller trades move the price less and offer less profit to sandwich. Waiting until liquidity deepens after launch often gives you a better average price than buying in the first block against snipers.

Checklist: Buying a New Token on a DEX After Launch

1. Get the contract address only from the project's official channels or launchpad page. Fake tokens with the same name appear within minutes of a launch.
2. Check pool size, volume and holder concentration on a tool such as DEX Screener. Our walkthrough on how to use DEX Screener to track tokens and liquidity shows where to look.
3. Read the price impact in the swap preview. If it is above 2% to 3%, reduce the order size.
4. Set slippage manually, ideally 1% to 3% for a new token. Never set it above what you are willing to lose.
5. Switch to an MEV-protected RPC or a swap interface with MEV protection before you trade.
6. If the transaction fails, wait and re-check the price instead of raising slippage in a panic.
7. Check that token taxes or transfer restrictions are disclosed. A "slippage needed" message can also signal a hidden sell tax, which is a rug-pull warning sign covered in our presale scam checklist.

Warning: "Free MEV Bot" Tutorials Are Usually Scams

Search for "mev bot" on YouTube or GitHub and you will find tutorials promising passive income from an "arbitrage bot" you can launch in minutes. Most of these are designed to steal your crypto.

SentinelLABS, the research unit of cybersecurity company SentinelOne, documented this scheme in a report by Alex Delamotte titled "Smart Contract Scams | Ethereum Drainers Pose as Trading Bots to Steal Crypto" (updated August 5, 2025). According to the report:

• Scammers publish YouTube videos presenting a Solidity smart contract as an MEV or arbitrage trading bot, often using aged YouTube accounts, AI-generated presenters and curated comment sections to look legitimate.
• Viewers are told to paste the code into an online editor, deploy it and fund it with ETH, then call a function such as Start().
• The contract contains an obfuscated attacker wallet address. Once funded, it sends the money to the attacker instead of trading.
• The scams analyzed each made several thousand dollars, and one wallet linked to a single scam video collected more than $900,000.

The rule is simple: no one gives away a profitable MEV bot. Real MEV searching is a highly competitive business where, as ethereum.org notes, searchers may pay 90% or more of their revenue in fees just to win the transaction. If a video promises easy MEV profits, close it. Never deploy or fund a contract you cannot read yourself, and never paste your seed phrase or private key into a "bot dashboard."

Is MEV Always Bad? The Counterpoint

To be fair, MEV is not purely harmful. Ethereum.org points out that DEX arbitrage keeps prices consistent across markets and that fast liquidations keep lending protocols solvent. Without these bots, DeFi would be less efficient and less safe for lenders.

Protection tools also have limits you should know about:

• Private RPCs trust a third party. You rely on the RPC operator and the builders it shares with not to misuse your transaction.
• Speed trade-offs. Private routing can occasionally be slower to land, which matters in a fast-moving launch.
• Chain coverage varies. Flashbots Protect and MEV Blocker are Ethereum-focused. Protection on other EVM chains, layer 2s and Solana depends on the specific wallet, RPC and DEX you use.
• Protection does not fix bad entries. MEV protection stops sandwiches; it does not stop you from buying a token at an inflated price or into a pool that the team can drain.

Frequently Asked Questions

What is an MEV bot in crypto?

An MEV bot is an automated program that watches pending blockchain transactions and places its own transactions before, after or around them to capture profit from transaction ordering. That profit is called maximal extractable value (MEV).

What does MEV stand for?

MEV stands for maximal extractable value. It was originally called miner extractable value when Ethereum used proof of work; the name changed after the switch to proof of stake because validators, not miners, now order transactions.

Are MEV bots legal?

MEV bots operate in a legal gray area. Arbitrage and liquidations are widely accepted market activity. Sandwich attacks have not been clearly regulated in most countries, although regulators and courts are paying more attention to manipulative trading on-chain. This is general information, not legal advice.

How do I know if I was sandwiched?

Open your swap transaction on a block explorer and look at the transactions directly before and after yours in the same block. If the same address bought the same token just before you and sold it just after you, your trade was almost certainly sandwiched.

What slippage should I use to avoid MEV bots?

For liquid pairs, 0.5% to 1% is usually enough. For newly listed tokens, keep it at 1% to 3% and reduce your order size if the price impact is high. Very high slippage such as 10% or more makes you an easy sandwich target.

Can I make money by running an MEV bot?

Professional MEV searching is extremely competitive and requires advanced engineering and capital. Tutorials offering a ready-made profitable MEV bot are almost always scams that drain the money you send to the contract, as documented by SentinelLABS in August 2025.

Do MEV bots exist on Solana and BNB Chain too?

Yes. MEV exists on any blockchain where transaction ordering can be influenced. On Solana, MEV activity runs largely through Jito's block engine, and sandwiching of memecoin and new-token trades is common. Check whether your wallet or DEX offers MEV protection on the chain you use.