Jito Labs Co-Founder Warns of More Solana Attacks Amid Auction Growth

Jito Labs co-founder Lucas Bruder (buffalu) said Solana applications have flagged more front-running and sandwich attacks amid wider use of order-flow auctions, raising concerns about early access to user transactions.

Several applications and other network participants brought the concerns to Jito Labs over the past few months, Bruder said. The complaints coincided with wider adoption of order-flow auctions by validator and client teams.

Bruder estimated that 30% to 40% of staked Solana (SOL) participates in some form of order-flow auction. In the arrangements he described, validators give third-party searchers priority access to user transactions and share the resulting revenue. He characterized that early access as a private mempool.

Bruder said auction providers claim to use identity checks and safeguards against front-running. He questioned whether those measures can be judged effective before abuse is discovered and users have incurred losses.

He alleged that poor oversight by one provider allowed searchers to carry out sandwich attacks across several applications for weeks, and affected users received no compensation.

Jito closed its public mempool in March 2024 over sandwich attacks. Bruder urged validators to check whether their software gives third parties early access to user transactions and called on people delegating stake to consider transaction execution quality alongside staking returns.