MEV searcher (mid-tier), whitehat, blockchain surveyor

The mempool
Joined October 2021
let's start a new trend: GOOD VIRTU SIGNAL I donated 💪 where all ETH community ppl now? (pls RT to help Roman)
My trial is fast approaching and time is running out, but I have faith thanks to this community’s consistent support. Please donate towards my defense if you’re able. wewantjusticedao.org/juicebo… #defendromanstorm
2
35
8
102
38,637
How to get multiple concurrent proposers on mainnet: 1. Let multiple proposers submit transactions for inclusion in the same slot 2. Come up with a fair ordering rule for the union of their transactions
7
9
4
155
18,711
CODE IS LAW-- --yers getting my money back in court when I fuck up my code
8
27
2
151
25,575
"Crypto is for the unbanked", I say as I send $1000 to Kenya to buy goats for a villager, "The greatest transfer of wealth in human history", I whisper as I demand he turn them into a racing team "The future of finance", I mumble through gritted teeth while naming the goats after every word for breasts I can conceive of
44
63
6
681
63,555
Pretty crazy these guys found a bug that could crash most nodes on the network and got 0$ from EF and 1000$ from Flashbots
2
2
1
37
4,676
The MEV supply chain and its complicated interactions with all parts of Ethereum could use more study and testing. For me this was most clearly illustrated about a year ago in the fallout of lowcarbcrusader's equivocation attacks. At the time it felt to me that something like pandora's box had been opened. We quickly fixed the relay bug that lowcarbcrusader used, but then found several other equivocation attacks we needed to quickly patch. Soon lowcarbcrusader themself had reached out to a few of us to disclose another attack (in return for rebranding themself away from sandwichtheripper). They pointed out a small nuance in CL client behavior in propogating blocks could give an attacker a substantial advantage (~500ms) in equivocating. And they were right. When you saw it, it seemed obvious something like this would exist. But the reality was that very few people had knowledge of both the depths of the CL p2p and MEV, so I don't think anyone else had put this together before. If you're interested you can read more here: collective.flashbots.net/t/d… It was clear to me then, as it is now, that we needed people studying the complicated intersections of MEV and every part of Ethereum. I see the bug that Bloxroute's BDN had in its interaction with Lighthouse as the same sort of thing as the above disclosed attack from lowcarbcrusader. And fewer people are working at these intersections than Ethereum needs - especially those working in the open. I can't fault Bloxroute for looking for every edge that they can get in lowering latency, which I presume is why they were propogating blocks first without their blobs. For BloxRoute to stay competitive with other relays they need to look for this kind of edge. And I expect if they didn't another one of the other relays probably eventually does something similar if it helped with latency. The MEV industry is brutally competitive. Searchers, relays, and builders fight over literally milliseconds. That is the reality of MEV. What is unfortunate here is that they weren't more forthcoming with what they were doing. Of course, there is a thin line between "closed source edge" and what we can expect someone like BloxRoute to disclose given the importance of the BDN. But if they were more open with what they were doing I would've expect someone like @sproulM_ or @terencechain to have helped catch this challenge earlier on if they were. Moreover, it isn't clear to me why this wasn't caught on a testnet too. There were several testnets that included the whole relay, builder, mev-boost stack that were carried out to test the interaction between that stack and the client changes being made in a live environment. I'd make the contention that if your infrastructure is a major part of how mainnet blocks work we should expect it to be mirrored on testnet(s) and be a part of testing too. That goes for everyone in the supply chain too, not just BloxRoute. Perhaps this was tested on a testnet too, I don't know. I also wish that we have more people effectively red teaming the complicated interactions that result from the incentive to make money. In my ideal world before the latest fork happened a cracked group of people somewhere had thought "if I was a builder I would want to publish my blocks as late as possible. How can I shave off latency and get an edge in block propogation with the deneb changes?" and then came up with "Well, we could publish blocks without blobs first." And tested that interaction. Then, we could have caught this before mainnet went live and given those folks a grant for discovering a bug that later caused proposers to lose money. And this could be done across the stack too, where we'd hopefully find this recent bug as well as others - like the attack lowcarbcrusader highlighted and future bugs which will result from similar things. The reality is that Ethereum is complicated and the interactions between its clients - both execution and consensus - and MEV driven behavior are too much to expect any one stakeholder group to handle. Effectively managing that complexity requires across the board collaboration, openness, and leveraging the efforts of the whole community. It is long past the time where we realized that and built for it. To that end I'm heartened by the collaboration that we have with many CL teams, who have always been a pleasure to work with, and things like the PBS Foundation. I would like to see more people demanding MEV projects to uphold the tenets of crypto that we all cherish, like fairness, permissionlessness, and transparency. That would go a long way. As a community we can, and should, do much more. Flashbots stands ready as ever to join in the efforts to do so.
This post-mortem misrepresents the issue as a Lighthouse p2p bug, when in fact it was caused by an untested interaction between Bloxroute's centralised "block distribution network" (BDN) and Lighthouse's HTTP API Here's an account from my perspective
8
17
3
88
37,239
MevRefund retweeted
This post-mortem misrepresents the issue as a Lighthouse p2p bug, when in fact it was caused by an untested interaction between Bloxroute's centralised "block distribution network" (BDN) and Lighthouse's HTTP API Here's an account from my perspective
post mortem - missed slot incident on 27/3 TLDR 1) bloXroute relays published blocks & blobs correctly throughout the entire incident 2) but "something" caused slots to be missed (now fully resolved) 3) by design, bloXroute's relays broadcasted blocks thru its BDN, while the blob sidecars propagated thru the p2p 4) the sidecar is expected to propagate slower, and is allowed to be accepted until t=8 sec, and did propagate 5) this uncovered a specific CL behavior - it only accepted blobs from the first peer who suggested the block - even if other peers announced they have them 6) since bloXroute's relays are more integrated with the BDN, the issue was mostly observed in our relays, which publish the blocks themselves extremely fast thru the BDN, causing nodes to reject these blocks and cause missed slots xitter.cf/terencechain/status/17…
7
42
10
168
100,125
Mr. Wright is not Satoshi. The Court has just ruled definitively and without qualification. We are grateful that the rule of law has again prevailed.
41
206
13
1,196
52,885
.@hal2001 I think this relate to our discussion about Oval, and whether it matters or not if an oracle update is delayed by 3 blocks this happened *without* a delay in chainlink's oracle thoughts?
looks like comp v2 just ate about 3m of bad debt from the UNI +40% candle which didn't oracle update fast enough multiple mev bots managed to create accounts like these defi 1.0 violence
2
5
1
27
10,279
MevRefund retweeted
Today I conducted a massive whitehat operation for the JUP airdrop, a hacker came with nearly 5k "compromised" wallets , I think its a group of scammers that didnt get along and one went rogue , the wallet I sent to is: HF88dwazGWNq7XuiTPh36DLh6ABnXzp6uqyg7PyeN4ZJ
Replying to @CryptoEdgar_
5/ Over 1,000 wallets managed to collect more than 100,000 $JUP in airdropped tokens 😮 Biggest whale with >870,000 $JUP claimed: HF88dwazGWNq7XuiTPh36DLh6ABnXzp6uqyg7PyeN4ZJ But why all these claims are coming in small batches of 200 - 1,200 tokens per tx?
138
71
14
143
46,941
„I guessed two seeds in under 5 minutes“ Who will tell him?
164
45
22
1,275
324,450
MevRefund retweeted
Same
6
8
4
200
21,872
MevRefund retweeted
When you learn that a bug in Geth could wipe out 90% of your net worth.
7
46
2
200
43,240
MevRefund retweeted
Vanguard knows that there’s an ultra sound money and that it’s irresponsible to let their clients invest in an ETF that is merely sound money
11
12
1
318
17,355
OK this is hilarious. "09/01/24 SEC Chairman on the brink of second ETF approval"
60
408
68
2,216
187,385
MevRefund retweeted
Flight attendant: is there a doctor on this flight? Dad: this could have been you Me: not now dad Dad: Not asking for a crypto bro for help now are they? Me: Dad there’s a medical emergency right now Dad: go and see if “blockchain fixes this”
140
817
85
12,447
1,445,753
This hacker made ~$20k by copycat exploiting Thirdweb and NFT trader vulnerabilities. And they have been tipping @BlockSecTeam for sharing the vulnerabilities on Twitter. Made my day 😂😂 etherscan.io/idm?addresses=0…
6
33
6
288
53,052
MevRefund retweeted
10
8
3
161
17,717
Taylor Swift is rerecording her albums because the first Taylor Series was only an approximation.
57
551
68
5,300
411,104
Replying to @GwartyGwart
I'm keeping this Saylor quote in my notes as a constant reminder of how little I understand
1
1
15
1,277