Major MEV event wipes out $25 million: How this affects Ethereum validators and ETH holders

The Ethereum blockchain was hit by a sophisticated attack by a group of automated entities, bots. The bots targeted Miner Extractable Value (MEV) extractors and compromised them for $25 million in their exploit. 

The most interesting part of the exploit was that the hacker put nearly $60,000 worth of their capital at risk, joining the ETH network as a validator to engage in the MEV attack. 

Also read: Ethereum price shows sign of rally, will Ethereum climb to $2,000?

How a group of bots stole $25 million: MEV exploit

The MEV attack on Ethereum network turned out to be a sophisticated exploit on a series of blockchain bots that work in tandem and generate revenue by pooling together transactions with the highest fees to maximize their profits. 

$25 million was wiped out, and the attacker put nearly $57,000 of their capital at risk, staking 32 ETH in the ETH2 deposit contract and joining the blockchain as a validator.

A malicious actor pooled together MEV bots and replaced transactions picked by bots with malicious ones, resulting in a theft of $25 million. The MEV bots that use the strategy to increase their profitability suffered a significant loss with the actions of the exploiter. 

Stealing stolen funds: What does this mean?

Experts on crypto Twitter commented on the MEV exploit, calling it out for “stealing stolen funds,” however MEV is a rational strategy implemented by block producers for higher profitability. The funds are not “stolen” when extracted by a block producer since they guarantee integrity of transactions on the blockchain and support their function. 

Therefore, the exploit by malicious actors resulted in a theft of $25 million of the MEV bots’ funds and resulted in damages to their profitability. It cannot be regarded as an exploit on “stolen funds.” 

How does the MEV attack affect the ETH community and holders?

The MEV attack has now raised questions on the “honesty” or “maliciousness” of validators. While there is an honest validator specification in the Bellatrix upgrade on Ethereum, there is no centralized process and no KYC for validators. 

This has posed as one of the challenges of designing a trustless decentralized protocol where malicious actors don’t gain access to validators and corrupt a blockchain. Experts believe such setbacks continue to pile on the technical challenges that Ethereum developers tackle in improving the protocol through Ethereum Improvement Proposals (EIPs) in subsequent upgrades.

Ethereum holders and community members that engage in arbitrage, front-running, and liquidation to profit through MEV are at the risk of such attacks by exploiters.