Comment

Comment on MIT Students Stole $25 Million In Seconds By Exploiting ETH Blockchain Bug, DOJ Says

Frustratingly vague for a Slashdot write-up.

“These brothers allegedly committed a first-of-its-kind manipulation of the Ethereum blockchain by fraudulently gaining access to pending transactions, altering the movement of the electronic currency, and ultimately stealing $25 million in cryptocurrency from their victims,” said Special Agent in Charge Thomas Fattorusso of the IRS Criminal Investigation (IRS-CI) New York Field Office.

Good to know the prosecutors have an understanding of what they’re prosecuting… Not even a single mention of MEV in the DoJ press release.

source

Sort:hotnew top

Kazumara@discuss.tchncs.de ⁨5⁩ ⁨months⁩ ago

by fraudulently gaining access to pending transactions

That makes no sense to me. The mempool is public, everyone can see pending transactions.

source
- treadful@lemmy.zip ⁨5⁩ ⁨months⁩ ago
  Because it’s not the public mempool. It’s a private MEV mempool that people pay to add their transactions to for special priority or conditional inclusion. For instance, asshole profiteers can use it to sandwich attack traders to siphon off “market inefficiencies” or some people just want immediate front of the line inclusion in the next block.
  
  Presumably they exploited something in this MEV system (completely unrelated to the Ethereum protocol) that allowed them to see the pool and they shouldn’t have. Wish I knew more but everything I read was incredibly vague and misleading.
  
  source
  - Kazumara@discuss.tchncs.de ⁨5⁩ ⁨months⁩ ago
    
    It’s a private MEV mempool
    
    Are you sure there is such a thing? My understanding was that they just submit their sandwich transactions to the mempool with higher and lower gas respectively to achieve their desired priority ranking. Could be wrong though.
    
    source
    treadful@lemmy.zip ⁨5⁩ ⁨months⁩ ago
    I’m sure, yes. If you submit to a public mempool, you have no guarantees that your two transactions will land on either side of the target transaction in the same block (They likely won’t). You need to leverage conditional transactions with MEV so you guarantee the miner will select and position your transactions where you need them. In this case, before and after the target transaction.
    
    Check out the Ethereum Foundation’s page on MEV for more info.
    
    source
    -> View More Comments
bartolomeo@suppo.fi ⁨5⁩ ⁨months⁩ ago
What’s funny is that that’s a description of MEV.

gaining access to pending transactions, altering the movement of the electronic currency, and ultimately stealing $25 million in cryptocurrency from their victim

I skipped “fraudulent” because neither MEV bots nor this attack can be called fraudulent imo, although MEV is definitely taking value one didn’t help create.

source