# Relay Plans Full Reimbursement for 5,600 Users After Sandwich Attacks

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/25143
Published: 2026-09-29T02:24:03.000Z
Updated: 2026-09-29T02:24:03.000Z
Section: Technology

> An API flaw exposed pending orders before execution, enabling MEV searchers to profit about $136,000 from affected transactions.

Relay plans to fully reimburse about 5,600 users after an API vulnerability exposed pending order details and enabled sandwich attacks before transactions were executed.

MEV searchers — bots that seek profit by exploiting transaction ordering — used the exposed routing information to trade around affected orders. The attackers gained about $136,000 in total, while the median loss per affected user was $11.88.

Relay estimates that its reimbursement program will distribute about $312,000. Payments will be sent automatically to the relevant wallet addresses, and users will not need to submit claims.

The cross-chain execution protocol also paid Outputlayer a $50,000 bug bounty for identifying the vulnerability. The incident highlights how information exposed before execution can create risks for users relying on automated crypto transaction routing.