Crypto
Researchers uncover vulnerabilities leading to predatory trading in popular Ethereum cryptocurrency rollups
Ethereum, a decentralized online platform that allows users to conduct financial transactions in Ether cryptocurrency, prides itself on the system’s high security.
But new findings from Northeastern University’s computer scientists and researchers at ETH Zurich, a public research university in Switzerland, show that it might not be so bulletproof, and its users might be susceptible to some market participants’ predatory practices.
“There are direct monetary incentives,” says Ben Weintraub, a Northeastern doctoral student in the Khoury College of Computer Sciences. “So in my view, it’s better if researchers find and publicize it first before people mistakenly lose money.”
Weintraub presented the paper on the findings at the Association for Computing Machinery’s annual Conference on Computer and Communications Security (ACM CCS 2024) held Oct. 14–18 in Salt Lake City. The study is available on the arXiv preprint server.
He and his co-authors conducted a large-scale analysis of exploitative trading activities on Ethereum itself and across so-called rollups, or off-the-platform services that allow faster processing of higher volumes of transactions.
The researchers found evidence that certain actors can manipulate the market on rollups, which was previously thought to be impossible.
“It was known to be possible on regular Ethereum, but it was thought to be impossible on rollups and we showed that it is not impossible,” Weintraub says.
The paper presents three novel types of attacks in which predatory traders could have made about $2 million in profits in the last three years by manipulating transactions within Ethereum trading networks.
Ethereum is a network of independent computers across the world that follows the Ethereum protocol—a set of rules on how the computers in the global network can interact with each other. It uses blockchain technology, pioneered by Bitcoin.
A blockchain is a database of transactions that is shared across computers in a network. Once a new block, or a new set of transactions, is added to the blockchain, that data can no longer be removed by anybody, primarily due to cryptographic techniques that highlight any attempts at tampering.
Anyone can create an Ethereum account from anywhere, at any time. No central authority such as a government or a company has control over Ethereum, which means no individual can change the rules or restrict users’ access. Any Ethereum protocol changes require approval from more than half of the network.
Unlike Bitcoin, which is solely a payment system with a name-sake cryptocurrency, Ethereum allows users to build applications, communities and organizations on its platform.
The Ethereum network, however, has a scalability problem—as the number of people using it has grown, the blockchain has reached certain throughput limitations that further inflated the costs for conducting transactions on the platform.
One solution are the rollups, such as Arbitrum, Optimism and zkSync—which were analyzed by Weintraub—that aim to improve Ethereum’s speed by taking batches of transactions and calculations off Ethereum. This reduced the processing cost of a transaction to roughly 1 cent, Weintraub says.
Some actors make profits trading cryptocurrencies by trying to achieve maximal extractable value, he says, by manipulating the order of transactions that are pending inclusion on the blockchain. The research provides exclusive insights into the volume of maximal extractable value transactions on rollups, costs associated with them, profits made by such exploitative traders, competition between them and response time to such activities across Ethereum and the rollups.
Some methods that malicious actors use are common to financial markets, like arbitrage, when a user buys something on one exchange and quickly sells it for profit on another exchange.
“It’s generally thought to be a good thing because it keeps different exchanges balanced in terms of price,” Weintraub says. “But there are also types [of maximal extractable value] that are not good. One that’s fairly well-known in research is called sandwiching.”
In sandwiching, when a speculator sees someone is about to buy an asset, they buy it first, driving up the price. The speculator then quickly sells it at the higher price.
Sandwiching is considered a “bad,” manipulative trading strategy affecting the price that other traders get. On Ethereum, block producers—people or groups who get paid when their hardware is randomly selected to verify a block’s transactions—can try to maximize the amount of profit they make by manipulating how transactions are ordered or included in a block before it is added to the blockchain.
“The reason we call this an attack is because it is purely damaging to that victim, who now has to pay a little bit more for their transaction,” Weintraub says. “The system broadly does not benefit at all. There’s just the one who profits—the ‘sandwicher.’”
While the researchers didn’t find traditional sandwich attacks on popular rollups, they identified three potential strategies for them when transactions move between Ethereum and rollups with a time delay.
“This just came from analyzing the protocol and looking at the exact flow of transactions—when they get sent, when the rollup seems to respond to them or when they end up on the blockchain,” Weintraub says.
“We tested our attacks on [Ethereum’s] test-net, a network of ‘fake’ money that is used by developers to test their applications,” he says. “And, essentially, we stole all of the money from only ourselves.”
Weintraub is currently in contact with major rollups’ developers to see what can be done about the possibility of the attacks. Two types of these novel attacks can be prevented, Weintraub says, while it is unclear how to protect users from the third type.
“Our view is that it’s better to just get this information out there so people, at least, are aware of the risks,” he says.
More information:
Christof Ferreira Torres et al, Rolling in the Shadows: Analyzing the Extraction of MEV Across Layer-2 Rollups, arXiv (2024). DOI: 10.48550/arxiv.2405.00138
arXiv
Northeastern University
This story is republished courtesy of Northeastern Global News news.northeastern.edu.
Citation:
Researchers uncover vulnerabilities leading to predatory trading in popular Ethereum cryptocurrency rollups (2024, November 11)
retrieved 11 November 2024
from https://techxplore.com/news/2024-11-uncover-vulnerabilities-predatory-popular-ethereum.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.
Crypto
Crypto’s Liquidity Outlook Darkens as Fed Hawkish Pivot Pushes Hike Odds to 77%
Key Takeaways
- Wintermute warned tighter Fed policy could slow key liquidity channels into crypto markets.
- Officials lifted the median 2026 rate outlook as inflation concerns broadened.
- Tighter monetary policy can raise funding costs and reduce risk appetite, limiting demand across all three channels.
Warsh-Led Fed Reprices Rate Expectations as Inflation Risks Move Higher
Crypto markets entered a tighter liquidity environment after the Federal Reserve held rates steady while signaling a firmer stance on inflation. Wintermute, a crypto market maker and liquidity provider, said the shift created a more challenging backdrop for digital assets reliant on sustained capital inflows.
Referring to the Fed’s policy shift and its implications for capital flows into digital assets, Wintermute wrote:
“For an asset class that needs liquidity arriving through ETFs, stablecoins and DATs, a Fed leaning toward tightening is the opposite of what gets those funnels flowing.”
Exchange-traded funds (ETFs) channel institutional capital into crypto markets, stablecoins provide dollar-linked liquidity used for trading and settlement, and digital asset treasuries commonly refer to corporate or institutional balance sheets allocating funds to crypto. Tighter monetary policy typically raises borrowing costs and reduces risk appetite, which can slow inflows across all three channels.
Federal Reserve officials, at Kevin Warsh’s first meeting as chair, removed any easing bias and shifted projections toward tighter policy. The median 2026 rate outlook rose to 3.8% from 3.4%, with nine of 18 policymakers now expecting at least one hike this year and 17 flagging upside inflation risks. Markets reacted quickly, pushing December hike odds to about 77% from roughly 24% a month earlier.
Officials also shortened the policy statement to 130 words from 341, reinforcing the sharper change in tone. Brent crude fell 8.2% during the week on expectations tied to a reopening of the Strait, yet Wintermute noted that the Fed’s inflation concern appeared broader than energy.
Iran Breakdown Forces Crypto to Absorb Weekend Repricing
Geopolitical tensions added pressure after an Iran agreement expected to be signed on June 19 unraveled before completion. Israel’s strikes in southern Lebanon led Iran to exit negotiations, delaying a planned signing ceremony in Switzerland. Qatar has since worked to keep talks alive into late June, leaving the outcome uncertain.
Attention now shifts to upcoming macro data and diplomacy. The May Personal Consumption Expenditures (PCE) report will provide updated inflation readings, while Qatar’s mediation efforts will shape near-term geopolitical risk and energy market stability.
Wintermute highlighted the near-term catalysts tied to both macro data and diplomacy:
“May PCE on Friday, and the Qatar talks are the near-term catalysts.”
Market structure amplified the impact. U.S. equities were closed for Juneteenth, delaying repricing, while crypto traded through the weekend and absorbed the shift immediately.
BTC fell 3.8% for the week, dropping from near $67,000 to around $62,000 before stabilizing in the low $60,000s. ETH declined 1.2% and fell back below the $2,000 level, while altcoins were broadly flat. The move triggered about $600 million in long liquidations versus under $90 million in shorts, extending June’s pattern of one-sided unwinds.
Crypto
Man arrested for allegedly stealing $50,000 during meeting to purchase cryptocurrency
SINGAPORE – A man was arrested for allegedly stealing cash amounting to $50,000 from a victim during a meeting to purchase cryptocurrency late at night on June 21.
According to the police, who were alerted to a case of theft in New Upper Changi Road at 11.55pm that day, the victim had arranged to meet the suspect to purchase USDT cryptocurrency amounting to $100,000.
While preparing to hand the money over to the suspect, the victim had placed a portion of the cash on a bench, the police said in a statement on June 23.
The 25-year-old suspect then allegedly grabbed $50,000 worth of the cash placed on the bench and fled the scene.
Police officers arrested the suspect after establishing his identity with footage from police and CCTV cameras, and recovered cash amounting to $7,450.
The suspect is expected to be charged with the offence of theft on June 24. If found guilty, he can be jailed for up to three years, fined, or both.
Crypto
Safaricom Teams With Chainalysis as AI Hunts Payments Linked to Illegal Wildlife Trade
Key Takeaways
- Safaricom, Google, and Meta joined a United for Wildlife taskforce in 2024 to crush illegal trafficking.
- AI will monitor M-Pesa to disrupt a $23B illicit market that puts 1M species at risk of extinction.
- Next, British Airways and Heathrow will launch public campaigns to tighten the net on global smugglers.
Squeezing the Financial Flows
Kenyan telecom giant Safaricom has joined forces with a coalition of international technology, payments, and cryptocurrency firms to dismantle the financial networks driving the illegal wildlife trade. The initiative was announced at a recent event convened by Prince William and The Royal Foundation’s United for Wildlife taskforce.
According to a report, the coalition brings together technology giants, including Google, Meta, Tiktok, and Alibaba. The companies have committed to completely eradicating wildlife trafficking from their platforms using artificial intelligence (AI)-driven detection and prevention systems to catch illicit listings before sales take place.
While social media and e-commerce platforms focus on front-end listings, the battle is simultaneously moving to the financial back-end. Illegal wildlife trafficking is an extensively lucrative enterprise, with the United Nations Environment Programme (UNEP) estimating it generates up to $23 billion annually. It is a driving factor behind putting an estimated one million plant and animal species at risk of extinction.
To sever these financial lifelines, Safaricom—alongside its parent companies Vodafone and Vodacom—will deploy AI within its anti-money laundering (AML) and transaction monitoring systems. The AI will be integrated across M-Pesa, Africa’s leading mobile money platform, to flag and disrupt suspicious transactions linked to poaching and trafficking syndicates.
Concurrently, mainstream payment processors and major cryptocurrency analytics firms—including Paypal, Chainalysis, TRM Labs, and Luno—have pledged to use blockchain tracking and advanced digital forensics to hunt down and expose cross-border crypto wallets and alternative payment pathways used by wildlife smugglers.
The urgent need for digital and financial intervention is underscored by the historic devastation of Africa’s iconic megafauna, most notably the white rhinoceros. The species serves as a stark warning of how rapidly unregulated, criminal markets can push an animal to the absolute brink of extinction.
While intensive, century-long conservation efforts successfully revived the Southern White Rhino population to around 17,000, a resurgence in organized poaching over the last two decades has threatened to undo those gains. Rhino horn, which is composed of keratin (the same protein found in human hair and fingernails), has been sold on the black market for up to $60,000 per kilogram—making it more valuable by weight than gold or cocaine.
This immense profit margin shifted poaching from localized hunting to highly organized, transnational crime syndicates. By cutting off the modern payment infrastructure used by these syndicates, the new coalition aims to ensure other vulnerable species do not suffer the same fate.
A Unified Front
The private sector’s massive, coordinated pivot marks a turning point in environmental corporate responsibility, moving past standard non-profit donations toward deploying core tech architecture against criminal networks.
“What we see from the private sector today is a recognition that the illegal wildlife trade is both an environmental and a business issue,” said David Fein, co-chair of United for Wildlife.
Supporting the digital crackdown on the ground and in the skies, aviation leaders British Airways and Heathrow Airport also announced they will launch expansive public awareness campaigns to help travelers identify and report suspected wildlife products, tightening the net on smugglers globally.
-
Missouri1 minute agoMissouri lawmaker pushes for more transparency from data center developments
-
Montana4 minutes ago
Montana Lottery Mega Millions, Big Sky Bonus results for June 23, 2026
-
Nebraska9 minutes ago$22,000 2by2 winning ticket sold in Grand Island
-
Nevada16 minutes agoAs Utah, Nevada, Arizona wildfires burn, officials express concern over smoke inhalation
-
New Hampshire19 minutes agoFormer NH legislator sentenced to decades behind bars for exploitation of toddlers
-
New Jersey24 minutes ago
NJ Lottery Pick-3, Pick-4, Cash 5, Millionaire for Life winning numbers for Tuesday, June 23
-
New Mexico31 minutes agoMultigenerational center faces AC problems amid summer heat
-
North Carolina34 minutes ago
Thousands to watch barn owls grow up on NC owl cam