Go to app

Incident Summary

Published 7/6/2026, 9:13:11 PM

The reported extraction of value from a $2M ETH-to-LIT swap is characterized as a Sandwich Attack, a common Maximum Extractable Value (MEV) strategy where a bot exploits the price impact of a large trade. In this specific incident, a user reportedly swapped 1,126 ETH (valued at approximately $2.01M) but received only $14,208 worth of LIT tokens, representing a 99.3% loss of principal.

Incident Summary

MetricDetails
Transaction Size1,126 ETH (~$2,010,000 USD)
Value Received~$14,208 worth of LIT
Total Loss~99.3% of principal
Attack MechanismSandwich Attack (Frontrunning + Backrunning)
Primary CauseHigh Slippage Tolerance on a Low-Liquidity Pool

Mechanism of Extraction

The MEV bot executed the extraction through a three-step process in the public mempool:

  1. Frontrunning: The bot detected the victim's large pending buy order for LIT. It placed its own buy order with a higher gas fee to ensure it was processed first, driving up the price of LIT.
  2. Victim Execution: The victim's $2M trade executed at the artificially inflated price. Because the victim had a high slippage tolerance (or none at all), the Decentralized Exchange (DEX) router fulfilled the order despite the massive price impact.
  3. Backrunning: Immediately after the victim's trade, the bot sold its LIT tokens back into the pool at the new, even higher price, capturing the difference as profit.

Root Cause: The "Liquidity Trap"

The extraction was made possible by two critical factors:

  • Thin Liquidity: Research data indicates the LIT pool involved had extremely low liquidity (recorded as $0 in some security simulations). When a multi-million dollar order hits a shallow pool, the price curve shifts exponentially, creating a massive "spread" for a bot to capture.
  • Slippage Misconfiguration: The victim likely failed to set a strict slippage limit (e.g., 0.5% or 1%). Without this protection, the transaction was allowed to complete even though the price received was nearly 100% worse than the market rate.

Verification Note

While the mechanics described are consistent with documented MEV behavior, this specific $2M ETH-to-LIT incident on July 6, 2026, lacks independent confirmation from major crypto news outlets or verified on-chain transaction hashes in the available research data. Security tools also indicate that the LIT token contract may have inherent risks, as buy/sell simulations for the pair have failed due to execution reverts [Note: not independently confirmed].