Orca Crypto
Menu
Start Here
Learn
Chains
Exchanges
Markets
Tools
Safety
Glossary
More
Our tokens Book a session
Security term

Sandwich attack

A bot buys before your swap and sells after it, taking the difference.

Loading live prices
All terms
All termsAddressBlockBlock timeBlockchainConfirmationGasGweiHashMempoolNodePrivate keyPublic keySeed phraseTransactionWalletAll time high (ATH)Bear marketBull marketBundlerCandlestickCapitulationChart patternsCliffDollar cost averaging (DCA)Funding rateLeverageLimit orderLiquidationLiquidityMarket capMarket orderOrder bookPerp (perpetual futures)Position sizingPresaleRisk managementSlippageSniperSpreadStealth launchStop lossSupport and resistanceTrendUnlockVestingVolatilityVolumeWhaleAMMBonding curveBridgeBurnCEXDAODeFiDepegDEXFarmingFlash loanGovernance tokenGraduationImpermanent lossLiquidity poolLP (liquidity provider)LP tokenOraclePerpetual (perp)PointsRestakingRWAStablecoinTVLWrapped tokenYield farmingAirdropAlphaAnonApe (to ape in)Ape inBagholderBagsChadCope / copiumCrypto Twitter (CT)DegenDevDiamond handsDiscordExit liquidityFloor priceFOMOFUDGMHODLJeetKOLLARPLoreMaxiMeme coinMoonNFTNGMINo coinerNormiePaper handsPFPRaidRektSerShillSnapshotTelegram (TG)TradFiWAGMIWenAddress poisoningCold storageCustodyDue diligence (DYOR)Dusting attackExit scamFront runningHardware walletHoneypotHot walletMEVMultisigPhishingPump and dumpRug pullSandwich attackSelf custodySIM swapToken approvalTwo factor authenticationWallet drainerWash tradingAccount abstractionAppchainBlock explorerCirculating and total supplyConsensusData availabilityEVMFaucetFinalityForkFully diluted valuation (FDV)Gas warHalvingLayer 1Layer 2Layer 3MainnetMiningName serviceOptimistic rollupProof of stakeProof of workRollupShardingSidechainSlashingSmart contractStakingTestnetToken standardTokenomicsValidatorZero knowledge proofZK rollupArweave and the permawebComposabilityCross chain messagingdAppDecentralized identity (DID)DePINGameFi and play to earnIndexerInteroperabilityIPFSOnchain and offchainSession keysSmart accountSocialFiSoulbound tokenSybil resistanceToken gatingWeb2 vs Web3Web3
By the Orca Crypto teamUpdated 2026-09-01How we check this3 min readDefinition
Definition

A bot buys before your swap and sells after it, taking the difference.

The bot sees your pending swap in the mempool. It buys the token first, pushing the price up, lets your trade execute at that worse price, then sells immediately after.

Your slippage tolerance sets the ceiling on how much they can take. A high tolerance is an open invitation.

In practice

Keep slippage as tight as the trade allows, and use protected routing like 1inch Fusion or a private relay for larger swaps.

What people get wrong

That it only happens on huge trades. It happens wherever the profit clears the cost, which on a thin pool can be a few hundred dollars. Setting a tight slippage limit is what makes your trade not worth attacking.

Common questions

Why does a high slippage tolerance cost me money?
It tells the bot how much room it has. A five percent tolerance is an invitation to move the price nearly five percent against you and pocket the difference.
Do sandwich attacks happen on every chain?
Anywhere there is a public mempool and an automated market maker, which is most of them. Chains with private ordering or very fast finality make it harder rather than impossible.

Where this comes up on the site

The guides that actually use this word, rather than a list of everything we have written.

Where to go next

More security terms

Back to the full encyclopedia

Want this explained out loud?

Some of these land faster in conversation than in writing. Sessions are one to one and you can ask anything, including the things that feel too obvious to ask.

Share this page

Was this page useful?