Ethereum Bot Gets Attacked for $20M as Validator Strikes Back
The incident raises questions about whether validators can be trusted, one former member of the Ethereum Foundation said.
One of the major Ethereum MEV bots has been targeted in an attack, apparently by one of the blockchain's validators, resulting in the loss of almost $20 million.
MEV is an acronym for "maximal extractable value," which is a method validators use to try to maximize their profits when they validate transactions by including, excluding or changing the order of transactions in a block.
The attack happened all within one Ethereum block, with blockchain auditor OtterSec saying a validator appeared to force a series of transactions into the block to steal funds the bot had planned to gain by front-running. A validator is responsible for processing transactions and creating new blocks on the blockchain.
The attack has the potential to transform the MEV ecosystem because MEV extractors will be wonder "which Ethereum validators are malicious," former Ethereum Foundation member Hudson Jameson said in a tweet.
MEV flashbots use a technique called "sandwich attacks" to steal value from users by sending transactions just before and after a victim sends his or her own. This is a malicious way of manipulating the underlying price of the asset so that the bot can steal the price difference from the user.
In this case, OtterSec added that the validator responsible for causing the attack had funded his wallet more than two weeks ago from privacy layer Aztec Network, suggesting that it was a planned attack.
Blockchain sleuth Peckshield revealed that the $20 million in stolen funds are spread across three wallets, with eight linked addresses being originally funded from Indian crypto exchange KuCoin.
Más para ti
Protocol Research: GoPlus Security

Lo que debes saber:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
Más para ti
BlackRock continues its aggressive push into crypto with seven new global job openings

The $10 trillion asset manager is staffing up to scale digital asset ETFs, pursue tokenization and identify "first-mover big bets" in Asia.
Lo que debes saber:
- BlackRock is hiring seven digital asset roles, including one in Singapore, to expand its crypto and blockchain strategy.
- One U.S.-based role will help grow the iShares digital asset ETF lineup, including the $70 billion iShares Bitcoin Trust (IBIT), and develop new crypto-linked products.
- The Singapore role will lead BlackRock’s digital asset push across Asia, with a focus on long-term strategy and identifying first-mover opportunities.












