Grounded in
"No Place to Hide: An Analysis on Protected Order Flow Sandwich Attacks"
(Heimbach, Solmaz, Öz, Torres —
arXiv:2609.28115).
The paper runs a three-year measurement study across six chains and finds that trades submitted through
"protected" channels — private RPCs and native front-running protections — still get sandwiched at massive
scale:
28.0 million attacks on Solana alone, plus tens of thousands more on Ethereum, Tron and Base,
via exposures like order-flow-auction leaks, reorged blocks, an RPC bug on Base, and validator/application-level
leaks on Solana. Their conclusion: these protections give
substantially weaker guarantees than users expect.
Below, set a trade and watch a bot front-run it, let it execute at a worse price, then back-run for profit —
computed live from real x·y=k AMM math, not a canned number. Flip "private RPC" on and notice it only
dents the attack rate, exactly as the paper found.