How Does a Solana Bot Exploit MEV for $30M Profit?

In the endlessly evolving world of cryptocurrencies, an audacious Solana-based bot known as “arsc” has swiftly advanced to notoriety. This ingenious program has leveraged a technique called “sandwich attack” to pilfer approximately $30 million from Solana users within just two months. The operation centers on a cunning exploitation of maximal extractable value (MEV), a concept referring to the profit a miner can make through the inclusion, exclusion, or reordering of transactions within a blockchain block. Bots like “arsc” exploit this by essentially cutting in line. They strategically position a user’s transaction amidst two they control, facilitating the purchase of crypto at lower than market prices and the subsequent immediate sale at a higher rate, all within the span of a single block.

This sophisticated scheme has been traced back to a few key wallets, including one particularly large cache purportedly used for cold storage. Housing over $19 million, its assets are predominantly in Solana’s SOL and Circle’s USD Coin (USDC). Besides cold storage, there’s another hive of activity – a wallet engaging continuously in decentralized finance (DeFi) processes, shrewdly converting SOL to USDC. The ceaseless churn of these conversions is part of a grander strategy to veil the bot’s manipulations from the wary eyes of researchers and users alike.

Tracking the Trails of MEV Bots

In the dynamic panorama of digital currencies, a Solana-based bot nicknamed “arsc” has surged to infamy. It masterfully employs a “sandwich attack” to usurp around $30 million from users on the Solana network over a mere two months. By exploiting a niche known as maximal extractable value (MEV), it profits by manipulating the sequence of transactions in a blockchain block.

“arsc” intrudes into the transaction queue, sandwiching an unsuspecting user’s trade between its own. This ploy allows the bot to buy cryptocurrency cheaply and flip it immediately at a higher price in one block, making an instant profit.

Investigators have linked the scam to several wallets, with one holding a staggering $19 million – purportedly a cold storage trove, rich in Solana’s SOL and USD Coin (USDC) from Circle. Another wallet under scrutiny shows relentless DeFi activity, constantly trading SOL for USDC. This frenzy masks the bot’s activities, keeping the operation under the radar of researchers and Solana participants.

Explore more

Ipsos Unveils 2026 Global Customer Experience Insights

The modern consumer landscape has shifted toward a reality where a brand’s reputation is no longer built on what is said in advertisements but on what is felt during every single transaction. In this environment, the subtle art of keeping a promise has become the ultimate differentiator between market leaders and those struggling to remain relevant. As organizations navigate this

Is Ethereum Set to Hit $1,750 Amid a Bearish June Slump?

The digital asset market is currently navigating a period of intense scrutiny as Ethereum experiences a notable decline in momentum, raising significant questions about its ability to maintain its recent price floors amidst a broader cooling of investor enthusiasm across the decentralized finance sector. While enthusiasts had previously pointed toward a robust trajectory for the second largest cryptocurrency, the reality

Linux Lite 8.0 Released with Ubuntu 26.04 LTS and New Tools

The technical landscape has reached a pivotal juncture where users increasingly demand that operating systems provide modern security features without demanding excessive hardware resources for daily operations. Linux Lite 8.0 arrives as a direct response to this need, bridging the gap between cutting-edge software foundations and the necessity for a streamlined, efficient user experience. By utilizing the recently launched Ubuntu

How Does XCSSET Malware Target the Xcode Supply Chain?

The core of modern software development relies on an implicit trust between the engineer and the integrated development environment, yet this very bond is currently being exploited by the XCSSET malware. Instead of relying on traditional phishing emails or deceptive software downloads to breach a system, this specific threat embeds itself directly into the developer’s workflow, turning the Xcode IDE

Microsoft and NVIDIA Launch RTX Spark for Local AI PCs

The shift from remote data centers to local silicon is finally reaching its peak as the computing industry moves away from the latency-heavy cloud models that dominated the early part of this decade. Microsoft and NVIDIA have officially bridged this gap by introducing a platform that promises to turn standard laptops into specialized AI workstations capable of handling intense generative