Skip to content
Back to the collection

Flash Boys 2.0: Frontrunning, Transaction Reordering, and Consensus Instability in Decentralized Exchanges

Philip Daian, Steven Goldfeder, Tyler Kell

Show all 8 authors

Yunqi Li, Xueyuan Zhao, Iddo Bentov, Lorenz Breidenbach, Ari Juels

2019 · arXiv

Read the paper
HN score
0
Mentions
6
Readers
6
Months
5
What’s in a score?

From the abstract

Blockchains, and specifically smart contracts, have promised to create fair and transparent trading ecosystems. Unfortunately, we show that this promise has not been met. We document and quantify the widespread and rising deployment of arbitrage bots in blockchain systems, specifically in decentralized exchanges (or "DEXes"). Like high-frequency traders on Wall Street, these bots exploit inefficiencies in DEXes, paying high transaction fees and optimizing network latency to frontrun, i.e., anticipate and exploit, ordinary users' DEX trades. We study the breadth of DEX arbitrage bots in a subset of transactions that yield quantifiable revenue to these bots. We also study bots' profit-making strategies, with a focus on blockchain-specific elements. We observe bots engage in what we call priority gas auctions (PGAs), competitively bidding up transaction fees in order to obtain priority ordering, i.e., early block position and execution, for their transactions. PGAs present an interesting and complex new continuous-time, partial-information, game-theoretic model that we formalize and study. We release an interactive web portal, http://frontrun.me/, to provide the community with real-time data on PGAs. We additionally show that high fees paid for priority transaction ordering poses a systemic risk to consensus-layer security. We explain that such fees are just one form of a general phenomenon in DEXes and beyond---what we call miner extractable value (MEV)---that poses concrete, measurable, consensus-layer security risks. We show empirically that MEV poses a realistic threat to Ethereum today. Our work highlights the large, complex risks created by transaction-ordering dependencies in smart contracts and the ways in which traditional forms of financial-market exploitation are adapting to and penetrating blockchain economies.

Metadata: arXiv. Abstracts retain their original authors’ rights.

In the conversation

Original HN comments, with labels from simple text rules. A label describes the whole comment and may miss context or irony. Read the discussion to make up your own mind. About the labels

6 selected excerpts · 6 total mentions

lazzlazzlazz
Neutral mention · rule
This is a deeply misleading headline. Other people have explained it as well, but Flashbots is a relay for transmitting transactions to the Ethereum network in a way that preserves their privacy (and exposure to something called MEV[1]). It's purely optional and the vast majority of transactions[2] do not actually pass through this relay. MEV is an interesting area of research[3]. Unrelated aside: why is the quality of Hacker News posts and comments on crypto so bad? I experience extreme Gell-Mann amnesia[4] almost every post I read. This is the industry I work in and the amount of misinformation produced and spread on Hacker News is absurd. [1]: https://arxiv.org/abs/1904.05234 [2]: https://explore.flashbots.net [3]: https://flashbots.notion.site/flashbots/mev-day-836f88806995... [4]: https://www.johndcook.com/blog/2021/01/18/gell-mann-amnesia/
3np
Neutral mention · rule
Same, I even bought some back in... 2014 I think? I'm yet ambivalent on if it's a factor on why it hasn't been able to attract serious attention, but I've heard the argument that doing calculations that have external value outside of PoW breaks the incentive mechanisms. To me, merge mining on Bitcoin[0] and MEV on Ethereum[1] are evidence against that argument, since we already have those forces in play today. So Gridcoins concept should work. [0]: https://blog.bitmex.com/the-growth-of-bitcoin-merge-mining/ [1]: https://arxiv.org/abs/1904.05234
v64
Neutral mention · rule
Flash loans are a great example of how blockchains enable new types of financial transactions that either aren't possible or are very difficult to do in a traditional financial setting. If you identify an arbitrage opportunity in the market, you can atomically borrow a large sum of money to take advantage of the price difference. You also have the added assurance that if the arbitrage opportunity goes away before you can take advantage of it, the entire transaction fails and you only lose the Ethereum transaction fee. It's essentially risk-free arbitrage. This paper [1] dives into detail about how these arbitrage mechanics play out on the blockchain, and how both arbitrageurs and miners manipulate transactions in order to make a profit. [1] https://arxiv.org/abs/1904.05234
jkhdigital
Neutral mention · rule
So glad you asked: 1. https://eprint.iacr.org/2019/748.pdf 2. https://arxiv.org/pdf/1810.11605.pdf 3. https://eprint.iacr.org/2019/775.pdf 4. https://users.encs.concordia.ca/~clark/papers/2019_wtsc_fron... 5. http://homepages.cs.ncl.ac.uk/patrick.mccorry/minerbribery.p... This one isn't an attack per se, it is mostly an exploration of arbitrage bots in decentralized exchanges running on Ethereum smart contracts. However, they point out that miners can trivially capture the value of the arbitrage transactions by front-running, and that this "free money" is like a bonus block subsidy that falls outside of the PoW consensus models: 6. https://arxiv.org/pdf/1904.05234.pdf This one actually operates through transaction fees only, so it doesn't depend on smart contract functionality. However, it is waaaaay more expensive (for the attacker) than the others: 7. https://www.cs.umd.edu/~jkatz/papers/whale-txs.pdf

Keep following the thread.

More in Databases

More from the same topics.

2017arXiv

The Case for Learned Index Structures

Tim Kraska, Alex Beutel, Ed H. Chi +2

Indexes are models: a B-Tree-Index can be seen as a model to map a key to the position of a record within a sorted array, a Hash-Index as a model to map a key to a position of a record within an unsorted array, and a BitMap-Index as a model to indicate if a data record exists or not.

19 mentions14 months
5HN score