Logo

MEV Basics: The Invisible Hand (and Tax) of Ethereum

Gemma Do
Gemma DoJanuary 26, 2026
Chains & Protocols
MEV Basics: The Invisible Hand (and Tax) of Ethereum

Summary

For years, MEV (Maximal Extractable Value) was the "dark forest" of Ethereum—a hidden dimension where predatory bots front-ran trades and siphoned millions from unsuspecting users. However, in 2026, the landscape has fundamentally shifted. With the rise of the Proposer-Builder Separation (PBS) model and the impending "Glamsterdam" upgrade, MEV is evolving from a chaotic exploit into a regulated, industrialized supply chain. This article unpacks the mechanics of the notorious "Sandwich Attack," explains the complex hierarchy of Searchers and Builders, and reveals how modern wallets are finally allowing users to capture this value for themselves through Order Flow Auctions.

 

The $100 Bill on the Sidewalk

Imagine you walk into a crowded stock exchange holding a large sign above your head that reads: "I am about to buy 1,000 shares of Apple for $200."

A robot standing next to you scans your sign with a laser. In the blink of an eye, it sprints to the seller, buys the shares for $200, sprints back to you, and sells them to you for $200.50. You get your shares, but you paid an extra $500 for the privilege. The robot pockets the difference and waits for the next person with a sign.

In traditional finance, this practice is known as front-running, and it will get you sent to prison. In the world of public blockchains, it is called MEV (Maximal Extractable Value), and for most of Ethereum's history, it has been simply "part of the game."

MEV is the profit that can be made by including, excluding, or reordering transactions within a block. Because the blockchain is radically transparent, everyone can see your transaction in the "mempool" (the public waiting room) before it is confirmed. In that brief window of 12 seconds, the time it takes for a slot to close, sophisticated algorithms wage a silent, high-speed war to extract value from your intent. It is an invisible tax levied by the most technically capable actors against the rest of the network.

From Miners to an Industrial Supply Chain

To understand how this value is extracted in 2026, we have to discard the old mental model where a "miner" does all the work. The days of a single entity listening for transactions and packing them into a block are over. Ethereum has evolved into a highly specialized industrial supply chain, where transaction ordering is handled by a hierarchy of distinct actors.

It begins with The Searcher. These are the snipers of the network. Searchers operate complex bots that scan the mempool 24/7, looking for specific patterns. They are not interested in the coffee you bought; they are looking for large decentralized exchange (DEX) swaps, liquidation opportunities on lending protocols, or NFT mints. When a Searcher spots an opportunity—for example, a large buy order that will shift the price of a token—they construct a "bundle" of transactions. This bundle is a precise sequence of events: Buy before the user, let the user buy (which will push the price up), then sell immediately after the user (and net a hefty profit in the process).

However, Searchers cannot add blocks to the chain themselves. They must pass their bundles to The Builder. Builders are specialized entities equipped with massive computing power. Their job is to take thousands of bundles from different Searchers, combine them with standard user transactions, and play a high-stakes game of Tetris to construct the most profitable block possible.

Finally, the Builder hands the completed block to The Validator. In the Proof-of-Stake era, the Validator (the staker) has become somewhat of a passive landlord. They simply propose the block that comes attached with the highest bid. They do not need to understand the complex arbitrage strategies inside the block; they only need to know that Builder A is offering them 0.05 ETH to propose their block, while Builder B is offering 0.04 ETH.

The Good, The Bad, and The Sandwich

MEV is often villainized, but it exists on a spectrum. Not all extraction is parasitic; some of it is essential for the health of the decentralized economy.

The "Good" MEV is primarily Arbitrage. If Uniswap is selling ETH for $4,000, but Sushiswap is selling it for $3,900, the market is broken. Prices need to align for the economy to function. An MEV bot will spot this discrepancy, buy the cheap ETH, and sell it on the expensive market. In doing so, they pocket a profit, but they also perform a service: they ensure that all users across the globe see the same fair price for assets.

The "Bad" MEV is the notorious Sandwich Attack. This is the predatory front-running described earlier. A bot identifies a user willing to tolerate a certain amount of "slippage" (price variation) on a trade. The bot surrounds the user's transaction with its own, effectively forcing the user to buy at the worst possible price their settings allow. While competition among Searchers in 2025 compressed the margins of these attacks—often netting only a few dollars per victim—they remain a tax on inexperienced users who trade via public endpoints.

How a sandwich attack work. Source: Cow DAO
How a sandwich attack work. Source: Cow DAO

The 2026 Roadmap: Enshrined PBS and "Glamsterdam"

For the last few years, this separation between Builders and Validators relied on a piece of middleware software called mev-boost, developed by Flashbots. While effective, it introduced a reliance on "Relays"—trusted middlemen who had to ensure the Builder didn't cheat the Validator and vice versa.

This brings us to the major narrative of early 2026: the push toward Enshrined Proposer-Builder Separation (ePBS), a key feature of the upcoming "Glamsterdam" upgrade.

The goal of ePBS is to remove the trusted relays entirely. Instead of relying on a third-party server to broker the exchange of blocks, the Ethereum protocol itself will handle the relationship. The consensus layer will recognize the role of the Builder, allowing them to pay the Validator directly through the protocol in a trustless manner. This hardens the network against censorship, as it removes centralized chokepoints where a regulator could theoretically demand that certain transactions be filtered out.

How You Get Paid

Perhaps the most significant shift for the average user in 2026 is that MEV is no longer just something that happens to you; it is something you can participate in. The narrative has shifted from "MEV Prevention" to "MEV Redistribution."

We have entered the era of Order Flow Auctions (OFAs). In the past, broadcasting a transaction to the public mempool was like throwing meat into a shark tank. Today, modern wallets (like Rabby, or MetaMask via specialized "Snaps") default to using Private RPCs such as Flashbots Protect or MEV-Blocker.

When you use these services, your transaction skips the public mempool entirely. Instead, it is routed privately to Searchers and Builders who bid for the right to process your order. If there is back-running value to be created from your trade (e.g., an arbitrage opportunity), the Searchers will capture it, but—and here is the revolution—they are forced to kick a portion of that profit back to you to win the auction.

In this new system, your transaction is treated as a valuable commodity. You are the supplier of "Order Flow," and the market must pay you for it. Instead of losing money to slippage, users in 2026 are frequently seeing "MEV Rebates" that offset their gas costs. We haven't killed the robots; we have simply unionized against them.

Conclusion: Taming the Dark Forest

MEV will never disappear. As long as there is information asymmetry and a delay in block processing, there will be value to extract. It is a fundamental law of thermodynamic finance.

However, the "Dark Forest" of 2020, where users were helpless prey, has matured into the regulated, industrialized market of 2026. Through protocol upgrades like ePBS and the adoption of private transaction pools, Ethereum is turning a bug into a feature. The invisible tax is becoming a transparent dividend, ensuring that the value generated by the network flows not just to the sophisticated few, but back to the users who power the system.

 

Disclaimer:The content published on Cryptothreads does not constitute financial, investment, legal, or tax advice. We are not financial advisors, and any opinions, analysis, or recommendations provided are purely informational. Cryptocurrency markets are highly volatile, and investing in digital assets carries substantial risk. Always conduct your own research and consult with a professional financial advisor before making any investment decisions. Cryptothreads is not liable for any financial losses or damages resulting from actions taken based on our content.
ethereum
mev

FAQ: MEV Basics

It stands for Maximal Extractable Value. It was formerly known as "Miner Extractable Value," but the name was changed when Ethereum switched to Proof-of-Stake to reflect that validators and builders now extract this value.

Gemma Do
WRITTEN BYGemma DoGemma Do is a Quant Trader and Trading Analyst who bridges intuition and algorithms to decode the markets. With a passion for turning numbers into narratives, Gemma specializes in crafting precise trading strategies, quantitative modeling, and insightful market analyses across crypto and traditional finance. Blending rigorous analytics with a trader’s instinct, Gemma has earned a reputation for demystifying complex market movements, helping traders navigate uncertainty with clarity and confidence. Her strategic insights consistently equip readers with the edge needed to thrive in dynamic trading environments.
FOLLOWGemma Do
XFacebookInstagram

More articles by

Gemma Do

Hot Topic