Uniswap

SushiSwap

Foundation

Tornado

<p>Do you want to learn more about DeFi and sandwich attacks? Do you want to know how they work, how they affect you, and how you can avoid them? If yes, then you are reading the right article. This article explains everything you need to know about DeFi and sandwich attacks simply and easily; what they are, how they work, how much damage they have caused, and how you can prevent or avoid them. Read on and discover the over $20 million problem of sandwich attacks in DeFi. </p> 
<p><strong>Sandwich attacks cheat DeFi users by changing token prices on blockchain networks and <a href="https://droomdroom.com/decentralized-exchange-future-of-crypto/" data-type="link" data-id="https://droomdroom.com/decentralized-exchange-future-of-crypto/">DEXs</a>. They make users pay more or get less for their trades, while they keep the profit. Users can avoid them by using limit orders, stop-loss orders, better-priced oracles, and privacy tools.</strong></p> 
<figure class="wp-block-image size-large">
 <img loading="lazy" decoding="async" width="1024" height="572" src="https://droomdroom.com/wp-content/uploads/2023/11/sandwich-attacks-1024x572.jpg" alt="Image explaining sandwich attacks in DeFi " class="wp-image-17246" title="Sandwich Attacks in DeFi: A Beginner's Guide 17">
</figure> 
<h2 class="wp-block-heading" id="introduction-to-sandwich-attacks-in-de-fi"><strong>Introduction to Sandwich Attacks in DeFi</strong></h2> 
<p>DeFi, short for <a href="https://droomdroom.com/what-is-defi/" target="_blank" data-type="link" data-id="https://droomdroom.com/what-is-defi/" rel="noreferrer noopener">decentralized finance</a>, is simply a range of applications and platforms that use blockchain technology and <a href="https://droomdroom.com/smart-contract-wallets-explained/" target="_blank" rel="noreferrer noopener">smart contracts</a>, or more simply put, they are like the computers and the internet used to render financial services without banks or other middlemen. DeFi lets users lend, borrow, trade, save, invest, and more in a way that is transparent, permissionless, and trustless or secure. DeFi is cool because it can help anyone with an internet connection and a crypto wallet to access financial services anywhere in the world.</p> 
<p>But like many other financial systems, DeFi is not perfect. It has some problems and costly risks that you need to know about. One of these problems is called <a href="https://support.uniswap.org/hc/en-us/articles/19387081481741-What-is-a-sandwich-attack-" target="_blank" rel="noreferrer noopener nofollow">sandwich attacks</a>. Sandwich attacks are a way of cheating people who use DeFi to trade tokens. Tokens are like digital coins that have different values and uses. For example, ETH is a token that you can use to pay for interacting with the Ethereum network, which is where most DeFi apps run.</p> 
<blockquote class="wp-block-quote"> 
 <p><a href="https://droomdroom.com/security-in-blockchain-threats-and-best-practices/" target="_blank" rel="noreferrer noopener">Besides sandwich attacks, many other attacks in DeFi exist. This article highlights the top 10 Blockchain security threats to watch out for.</a></p> 
</blockquote> 
<p>Sandwich attacks happen when someone sees your trade and tries to make money from it by changing the price of the token you want to buy or sell. They—do this, by placing two trades around your trade: one before and one after. They make your trade look like a sandwich filling between two slices of bread, hence the dubbed name “Sandwich attacks”. This way, they can buy the token for cheaper or sell it for more than you do, and pocket the difference as their profit.</p> 
<figure class="wp-block-embed aligncenter is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Over $675 million has been extracted from Ethereum users since January’20 in form of various types of MEV attacks (Miner Extractable Value) such as front running, back running, sandwich attacks, time bandit attacks, etc.<br><br>In this thread, we’ll discuss DeFi sandwich attack.<br><br>1/n <a href="https://t.co/QGjFKSEoJM" rel="nofollow" target="_blank">pic.twitter.com/QGjFKSEoJM</a></p>— Obvious⚡️ | obv.id (@itsobvioustech) <a href="https://twitter.com/itsobvioustech/status/1589651989020876801?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">November 7, 2022</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>In recent years, sandwich attacks have caused a lot of damage in DeFi, especially on platforms that let users swap tokens directly from their wallets. These platforms are called decentralized exchanges or DEXs. According to some researchers, <a href="https://www.mdpi.com/2079-9292/12/21/4417" target="_blank" rel="noreferrer noopener nofollow">sandwich attacks have taken over $20 million from DeFi users</a> between September 2020 and March 2021. The study also found that sandwich attacks account for over 22% of the total transaction fees paid by DeFi users during that period.</p> 
<blockquote class="wp-block-quote"> 
 <p><a href="https://droomdroom.com/decentralized-exchange-future-of-crypto/" target="_blank" rel="noreferrer noopener">Read this guide to learn all you need to know about decentralized exchanges (DEXes).</a></p> 
</blockquote> 
<h2 class="wp-block-heading" id="what-are-the-factors-that-enable-sandwich-attacks-in-de-fi"><strong>What Are the Factors That Enable Sandwich Attacks in DeFi?&nbsp;</strong></h2> 
<p>Sandwich attacks depend on three main factors: blockchain transparency and the mempool, gas fees, and transaction priority, and price slippage and liquidity pools— how DEXs set their prices.</p> 
<h3 class="wp-block-heading" id="strong-blockchain-transparency-and-the-mempool-how-blockchain-networks-work-strong"><strong>Blockchain transparency and the mempool (how blockchain networks work)</strong></h3> 
<p>Public blockchain networks are like ledgers that record all the transactions that happen on them. Anyone can see the transactions that are sent to the network. However, not all transactions are confirmed right away. Some transactions are waiting in a pool of unconfirmed transactions, called the mempool until they are included in a block by a miner. The mempool is also public, meaning that anyone can see the waiting transactions, and their details, such as who is sending, or receiving what—and how much they are paying for it. This allows attackers to watch the mempool for profitable opportunities to sandwich.</p> 
<h3 class="wp-block-heading" id="strong-gas-fees-and-transaction-priority-how-much-you-pay-for-your-trades-strong"><strong>Gas fees and transaction priority (how much you pay for your trades)</strong>&nbsp;</h3> 
<p>When you send a transaction to a blockchain network, you have to pay a fee to get it confirmed. That fee you pay is called the gas fee, on Ethereum. Gas fees depend on how complex your transaction is and how busy the network is. You can choose to pay higher or lower gas fees depending on how fast you want your transaction to be confirmed, i.e., the higher the money, the faster the deal! Miners prefer transactions with higher gas fees because they earn more from them. </p> 
<p>This creates an incentive for sandwich attackers to pay higher gas fees than you to make sure that their trades are confirmed faster before and after yours. That’s the whole idea of sandwich attacks, trying to be a step ahead.</p> 
<h3 class="wp-block-heading" id="strong-price-slippage-and-liquidity-pools-how-dexs-set-their-prices-strong"><strong>Price slippage and liquidity pools&nbsp; (how DEXs set their prices)</strong></h3> 
<p>Price slippage is the difference between the expected price and the actual price of a trade. Price slippage occurs when there is not enough liquidity in the market to fill an order at the desired price that the user is willing and able to pay, Liquidity is the availability of tokens for trading. DEXs use smart contracts to hold tokens from different users who provide them in exchange for fees or rewards. These smart contracts are called liquidity pools. DEXs use liquidity pools to determine the prices of tokens based on supply and demand. </p> 
<p>When a big trade is made, it can affect the balance of the liquidity pool and change the price of the tokens. What this does is that I immediately create an opportunity for attackers to change the prices by placing trades before and after yours. That becomes a loophole in the system for attackers to manipulate and cash out on unsuspecting users.</p> 
<blockquote class="wp-block-quote"> 
 <p><a href="https://droomdroom.com/top-dex-projects/" target="_blank" rel="noreferrer noopener">We highly recommend that you read this article to learn more about DEXs and the Top 10 DEXs To Watch Out For</a></p> 
</blockquote> 
<h2 class="wp-block-heading" id="what-are-some-examples-of-sandwich-attacks-in-de-fi"><strong>What are some examples of sandwich attacks in DeFi?</strong></h2> 
<p>Sandwich attacks have happened on many DEXs in DeFi, such as <a href="https://uniswap.org/" target="_blank" rel="noreferrer noopener nofollow">Uniswap</a>, <a href="https://bancor.network/" target="_blank" rel="noreferrer noopener nofollow">Bancor</a>, <a href="https://www.sushi.com/" target="_blank" rel="noreferrer noopener nofollow">SushiSwap, </a>and a couple of others. These platforms utilize automated market makers (<a href="https://droomdroom.com/a-comprehensive-guide-on-dex-aggregators/" target="_blank" rel="noreferrer noopener">AMMs</a>) to provide liquidity and establish pricing for token exchanges. Here are some examples of sandwich attacks that have happened on some of the platforms:</p> 
<h3 class="wp-block-heading" id="strong-the-ewt-sandwich-attack-on-uniswap-strong"><strong>The $EWT sandwich attack on Uniswap</strong>:&nbsp;</h3> 
<p>According to a verified X handle, <a href="https://twitter.com/CryptoRam_/status/1581278295093497857?t=1HX7vwhAp5yNKo9ShWj9tQ&amp;s=19" target="_blank" rel="noreferrer noopener nofollow">someone lost</a> 12 $EWT buying 200 $EWT in a sandwich attack for $EWTB on Uniswap, in October of 2022. This attack was confirmed by other users, stressing the quick adjustment of slippage to maybe 0.1%, as a mitigation measure.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Uniswap traders create large amounts of toxic MEV—losing up to $3m a day to sandwich attacks.<br><br>UniswapX purports to solve this by replacing raw transactions with intents that are submitted to Uniswap's central server.<br><br>This addresses sandwiches, but also creates censorship MEV. <a href="https://t.co/tbyISytyQX" rel="nofollow" target="_blank">https://t.co/tbyISytyQX</a></p>— defi guy 🔥🦅 (@0xShitTrader) <a href="https://twitter.com/0xShitTrader/status/1682050967376732160?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">July 20, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h3 class="wp-block-heading" id="strong-mev-bot-sandwich-attack-strong"><strong>MEV bot Sandwich Attack</strong></h3> 
<p>In a supposedly breaking news by another verified X account, BitcoinWorld Media, the Ethereum Foundation <a href="https://twitter.com/ItsBitcoinWorld/status/1711617970290700628?s=19" target="_blank" rel="noreferrer noopener nofollow">lost $9,101 in MEV bot sandwich attack</a> during a 1,700 ETH sale on Uniswap V3. MEV bot’s net profit hit a sum of $4,060. The account reported that the Sandwich attack disrupted the Mempool transactions, and gave the attacker room to sandwich the trade.</p> 
<p>Many other instances of sandwich attacks on different platforms exist to date— too numerous to mention.&nbsp;</p> 
<blockquote class="wp-block-quote"> 
 <p><a href="https://droomdroom.com/a-comprehensive-guide-on-trust-wallet/" target="_blank" rel="noreferrer noopener">For a complete understanding of how to use trust wallets to secure your crypto investments, read this article: Mastering Trust Wallet: A Comprehensive Guide to Understanding and Using it Effectively for Secure Crypto Management</a>.</p> 
</blockquote> 
<h2 class="wp-block-heading" id="what-are-some-ways-to-prevent-or-avoid-sandwich-attacks-in-de-fi"><strong>What are some ways to prevent or avoid sandwich attacks in DeFi?</strong></h2> 
<p>Sandwich attacks are hard to stop completely, and this is because they are part of how blockchain networks and DEXs work. But, there are some ways that you can reduce the chance or impact of sandwich attacks in DeFi, if and when they happen. Some of them include, but are not limited to:</p> 
<h3 class="wp-block-heading" id="strong-using-limit-orders-and-stop-loss-orders-strong"><strong>Using limit orders and stop-loss orders</strong></h3> 
<p>Limit orders and stop-loss orders are types of trades that let you set the maximum or minimum price that you are willing to pay or receive for a token. Limit orders and stop-loss orders can help users avoid paying more or getting less than they want for their trades, as they will not execute if the market price is bad or unfavorable for the user. Some DEXs, such as <a href="https://1inch.io/" target="_blank" rel="noreferrer noopener nofollow">1inch</a> and <a href="https://dydx.exchange/" target="_blank" rel="noreferrer noopener nofollow">dYdX</a>, let you use limit orders and stop-loss orders as features or integrations on their platform platforms.</p> 
<h3 class="wp-block-heading" id="strong-using-dexs-with-better-price-oracles-strong"><strong>Using DEXs with better price oracles</strong></h3> 
<p>Price oracles are services that give reliable and accurate information about the market prices of tokens. Some DEXs, like Curve and Balancer—use price oracles to adjust their—liquidity pools and prevent big price differences from other markets. This can help you avoid losing too much money because of price slippage thus making it harder for sandwich attackers to change the prices. This also makes sandwich attacks unprofitable.</p> 
<figure class="wp-block-image size-large">
 <img loading="lazy" decoding="async" width="1024" height="576" src="https://droomdroom.com/wp-content/uploads/2023/11/sand-wich-attacks-1024x576.jpg" alt="Image describing sandwich attacks in DeFi " class="wp-image-17247" title="Sandwich Attacks in DeFi: A Beginner's Guide 18">
</figure> 
<h3 class="wp-block-heading" id="strong-using-tools-and-protocols-that-hide-your-trades-strong"><strong>Using tools and protocols that hide your trades</strong></h3> 
<p>This is one important, recommendable measure a user can put in place against attacks. Privacy-enhancing tools and protocols or tools and protocols that hide your trades are solutions that try to make your transactions more private and secret on blockchain networks. Some examples of tools and protocols that provide anonymity and confidentiality for users’ trades include Tornado Cash, Aztec Protocol, and <a href="https://dappradar.com/blog/what-is-zksync" target="_blank" rel="noreferrer noopener nofollow">zkSync</a>. These solutions can help users hide their transaction details from sandwich attackers and stop them from watching the mempool for sandwich opportunities.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">1/2 After incurring substantial losses to MEV sandwich attacks by jaredsubway.eth, I've finally found a safety net against price manipulation while making my DEX trades.<br><br>I highly recommend <a href="https://twitter.com/havoc_rip?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">@havoc_rip</a>'s trading tools which ensure top-notch safety with anti-rug &amp; MEV protection!👇 <a href="https://t.co/dRoFg5GfGA" rel="nofollow" target="_blank">pic.twitter.com/dRoFg5GfGA</a></p>— Crypto Trooper (@crypto_trooper0) <a href="https://twitter.com/crypto_trooper0/status/1692284607427678457?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">August 17, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="what-are-some-prominent-de-fi-projects-vulnerable-to-sandwich-attacks"><strong>What Are Some Prominent DeFi Projects Vulnerable to Sandwich Attacks?</strong></h2> 
<p>The truth is, any DeFi project that allows for direct trading of tokens (i.e. Decentralized Exchanges or DEXs, as earlier pointed out) can potentially be exposed to sandwich attacks. This includes well-known projects like Uniswap, PancakeSwap, or SushiSwap on the Ethereum network, and a host of others.</p> 
<p>It is, however, very important to add that these projects are aware of the issue and are constantly working on ways to prevent such attacks from happening or repeating themselves. For example, they might use better price oracles (which are like price feed services), limit orders, stop-loss orders, and privacy tools as security measures, as highlighted in this article.</p> 
<blockquote class="wp-block-quote"> 
 <p><a href="https://droomdroom.com/crypto-security-of-web3-assets/" target="_blank" rel="noreferrer noopener">This article provides 7 other key ways to secure your web3 assets: Crypto Security 101: 7 Ways to Safeguard Your Web3 Assets</a></p> 
</blockquote> 
<h2 class="wp-block-heading" id="conclusion"><strong>Conclusion</strong></h2> 
<p>Sandwich attacks are a serious problem in DeFi that can affect anyone who uses DEXs to trade tokens, especially for crypto newbies and enthusiasts. Sandwich attacks exploit the way transactions are seen, paid, and priced on blockchain networks and DEXs to manipulate prices and make money from unwitting users. Sandwich attacks have caused over $20 million from DeFi users in less than a year, in the recent past.</p> 
<p>But sandwich attacks are not impossible or unstoppable. Crypto novices or experienced users can take some measures to protect themselves from sandwich attacks, such as using limit orders, stop-loss orders, better-priced oracles, and tools that hide your trades. Users can also educate themselves about the risks and benefits of DeFi and do their research before using any DeFi application.</p>

Sandwich Attacks in DeFi: A Beginner’s Guide

Table of Contents

DroomDroom

Other articles published on Nov 23, 2023

XRP Price Surges Despite On-Chain Metrics Decline, Defies Market Trends!

Instead Of Using The Cloud For Sensitive Data Storage, Blockchain Is A Safer Alternative

FTT token surges 330%, adds $1.2 bln to market cap in 30 days

Ethereum Price Rises Above $2,000 Amid Increased Network Activity and ETF Hopes!

Binance CEO Changpeng Zhao Resigns Amid Legal Troubles, Paves Way for New Leadership

FTX Moves $36 Million In Polygon, Avalanche Tokens In Last 24 Hours – What’s Going On?

Join our free newsletter for daily crypto updates!