複雜的最大提取價值（MEV）三明治攻擊如何耗盡加密投資者的USD硬幣（USDC）餘額

在八秒鐘內，他們的美元硬幣（USDC）餘額在Tether（USDT）的貿易中僅耗資至5,271美元，作為機器人的貿易，賺取了超過215,500美元的利潤。

A crypto investor fell victim to a sophisticated Maximum Extractable Value (MEV) sandwich attack when attempting to execute a $220,764 stablecoin swap on Uniswap v3. Within eight seconds, their USD Coin (USDC) balance was drained to just $5,271 in Tether (USDT) as a bot front-ran the trade, amassing over $215,500 in profits.

當試圖在UNISWAP V3上執行220,764美元的Stablecoin互換時，加密投資者遭受了複雜的最大可提取價值（MEV）三明治攻擊的受害者。在八秒鐘之內，他們的美元硬幣（USDC）餘額在Tether（USDT）中僅排入5,271美元，因為它是機器人前線的交易，積累了超過215,500美元的利潤。

Highlighting the incident on X, DeFi Researcher 'DeFiac' noted that the stablecoin swap was executed at 2:33:30 pm on March 12, aiming to convert $220,764 USDC to USDT in the Uniswap v3 USDC-USDT stablecoin liquidity pool.

DeFi研究人員“ Defiac”強調了這一事件，指出，穩定股交換在3月12日下午2:33:30執行，旨在將$ 220,764 USDC轉換為UNISWAP V3 USDC-USDC-USDC-USDT StableCoin流動性池中的USDT。

The post highlighted that the pool had around $19.8 million locked and no trades had occurred for about seven minutes. Moreover, the trader set a 0.1% slippage cap, which is quite low, especially for a large trade.

該帖子強調，游泳池的鎖定約為1,980萬美元，並且沒有發生大約7分鐘的交易。此外，交易者設定了0.1％的滑倒帽，這很低，尤其是對於大型交易而言。

MEV bots typically prefer large trades with high slippage, rendering them optimal targets for such attacks. In this case, the bot performed a traditional front-running maneuver by quickly withdrawing all the available USDC liquidity from the pool before the trader's swap could be executed.

MEV機器人通常更喜歡較高滑倒的大型交易，從而使它們成為此類攻擊的最佳目標。在這種情況下，機器人通過在交易者交換之前迅速從游泳池中撤回所有可用的USDC流動性來執行傳統的前進操作。

Afterward, the bot immediately replenished the pool, enabling the trader's order to be fulfilled at an inflated price and the bot to realize a huge arbitrage profit.

之後，機器人立即補充了池，使交易者的命令以高昂的價格實現，並可以實現巨額套利利潤。

According to The DeFi Report founder Michael Nadeau, the attacker also tipped Ethereum block builder "bob-the-builder.eth" a staggering $200,000 for successfully including the trades in the block, leaving themselves with an $8,000 profit from the entire exploit.

根據DEFI報告的創始人邁克爾·納多（Michael Nadeau）的說法，攻擊者還向以太坊建築商“ Bob-the-Builder.eth”傾斜了一筆驚人的20萬美元，成功地包括該街區的交易，從而使自己從整個利用中獲得了8,000美元的利潤。

Is anyone safe using DeFi?A user on @Uniswap v3 was just sandwich attacked out of $216k while simply trying to swap $217k USDC to USDT.

有人使用defi安全嗎？

Mind you, this was a pool that had over $35m of USDC and USDT in it. This is insane.

請注意，這是一個擁有超過3500萬美元的USDC和USDT的游泳池。這太瘋狂了。

How did it happen? An MEV bot front-ran the tx by… pic.twitter.com/cyzu4M6qfz

它是怎麼發生的？ Mev Bot Front-Ran TX by…pic.twitter.com/cyzu4m6qfz

— DeFiac (@DeFiac_) March 13, 2024

- 2024年3月13日（@defiac_）

Pointing out that the same trader, most probably operating through several wallets, has been repeatedly targeted, DeFiac, using internal tools, claims that the trader was hit by at least six such sandwich attacks, all the funds having come from Aave's lending platform before being sent through Uniswap.

指出同一個交易員，很可能是通過幾個錢包運營的，反复針對的是使用內部工具，聲稱交易員至少遭受了至少六次這樣的三明治攻擊的襲擊，所有資金都來自AAVE的貸款平台，然後通過Uniswap發送。

Tx hashes: pic.twitter.com/krG2kfZjto

TX哈希：pic.twitter.com/krg2kfzjto

— DeFiac (@DeFiac_) March 13, 2024Further investigations by crypto analysts verified that two more wallets were performing sandwiching on March 12 in nearly the same category of trades. Wallets "0xDDe…42a6D" and "0x999…1D215" lost $138,838 and $128,003, respectively, in trades made in minutes following the $220,764 exchange.

- 2024年3月13日，Crypto Analysts的Defiac（@defiac_）調查了3月12日在幾乎相同類別的交易中進行夾心夾有兩個錢包。錢包“ 0xdde…42A6D”和“ 0x999…1d215”分別損失了$ 138,838和$ 128,003，在220,764美元的交易所交易後的幾分鐘內進行了交易。

These transactions, clocking in at an average of $364,000, were part of a money laundering scheme rather than simple trading blunders, some crypto analysts believe.

一些加密分析師認為，這些交易平均為364,000美元，是洗錢計劃的一部分，而不是簡單的交易計劃。

if you do happen to have illicit funds, you might build a highly MEV-conducive transaction, secretly forward it to an MEV bot, and allow them to arbitrage it in a bundle, said 0xngmi, DeFiLlama founder, adding that this would essentially "wash" crypto with little loss.

Defillama創始人0xngmi說，如果您確實有非法資金，您可能會建立一項高度MEV有效的交易，秘密地將其轉發給MEV機器人，並允許他們套件套利，Defillama創始人0xngmi表示，這本質上是“ Wash”的加密貨幣，幾乎沒有損失。

suggesting that the victims could have used private mempools to prevent the trades from being front-run, and set slippage caps more tightly to prevent price manipulation. He also advised trading through MEV-protected platforms like Uniswap’s front-end or alternative routing services.

暗示受害者本可以使用私人備忘錄來防止交易是前進的，並更緊密地設置了滑倒帽以防止價格操縱。他還建議通過UNISWAP的前端或替代路由服務等受MEV保護的平台進行交易。

Pointing out that traders are largely aware of MEV and prefer to use Uniswap’s front-end due to its built-in protections and default slippage settings which are designed to counteract sandwich attacks, legal and compliance issues posed no threat to the attacker, highlighted Defiant's founder.

指出，交易者在很大程度上意識到MEV，並且由於其內置保護和默認的滑板設置而傾向於使用Uniswap的前端，這些設置旨在抵消三明治攻擊，法律和合規性問題對攻擊者沒有威脅，強調了Defifted Defiant的創始人。

suggesting that these transactions do not originate from Uniswap’s front-end interface which has built-in MEV protections and default slippage settings to counteract sandwich attacks.

表明這些交易不是源自Uniswap的前端界面，該界面具有內置的MEV保護和默認的打滑設置以抵消三明治攻擊。

Uniswap CEO defended the platform’s security measures, saying that Uniswap’s official interface already incorporates safeguards against such exploits.

UNISWAP首席執行官為該平台的安全措施提供了辯護，稱UNISWAP的官方界面已經結合了防止此類漏洞的保障措施。

suggesting that the trader was engaging in risky trading practices by setting a low slippage cap on a large trade, which made them an easy target for MEV bots.

這表明交易者通過在大型交易上設置低滑倒上限來從事風險的交易實踐，這使它們成為MEV機器人的容易目標。

highlighting that traders should be mindful of the risks involved with decentralized exchanges and MEV abuse. Traders with large sums should utilize private mempools in a way that prevents front-running,

強調交易者應該注意分散交易所和MEV濫用涉及的風險。擁有大筆的交易者應以防止前線運行的方式利用私人孟買