Our review
This guide covers miner extractable value (MEV) concepts, common attacks like sandwich and frontrunning, and mitigation strategies.
Strengths
- Provides a clear list of MEV attack types and countermeasures
- Offers precise locations for organizing resources in a README
- Includes links to up-to-date external data sources
Limitations
- Does not go into deep implementation details of mitigations
- Focused on Ethereum and compatible chains, less applicable elsewhere
Use this guide when documenting MEV risks and security best practices for a DeFi application.
Avoid this guide if you need a hands-on, step-by-step tutorial on coding a specific mitigation.
Security analysis
SafeThis skill is purely educational, providing guidance on MEV concepts and resource organization. It contains no executable instructions, no dangerous commands, and does not instruct any data exfiltration or system modifications.
No concerns found
Examples
Explain the main types of MEV attacks including sandwich, frontrunning, and backrunning, and suggest mitigations for each.Help me structure a MEV security section in my project's README. Include subheadings for concepts, attacks, and mitigations, and suggest where to place links to external resources.List private transaction relays and MEV-blocking RPC endpoints that developers can use to protect users from MEV exploitation.name: mev-security description: Guide for MEV concepts, common attacks, mitigations, and how to organize MEV-related resources in README.md.
MEV Security
Scope
Use this skill for:
- MEV concepts and threat models
- Sandwich/frontrunning/backrunning patterns
- Mitigations and private transaction relays
Concepts (Quick List)
- Transaction ordering and block building
- Sandwich attacks
- Arbitrage and liquidation extraction
- Private order flow / private mempool
Mitigations
- Private transaction relays / RPC endpoints
- MEV blockers
- Commit-reveal patterns (where applicable)
- Slippage protection and simulation
Where to Add Links in README
- MEV concept resources:
DeFi Topics → MEV - MEV defense tooling (RPC/relays):
DeFi Topics → MEV(primary), optionallyDevelopment → Toolsonly if the link is a general-purpose dev tool
Rules
- English descriptions
- No duplicates
Data Source
For detailed and up-to-date resources, fetch the full list from:
https://raw.githubusercontent.com/gmh5225/awesome-web3-security/refs/heads/main/README.md
Security Audit Scanner
Security
Analyzes code to detect OWASP Top 10 vulnerabilities.
OWASP Security Checklist
Security
Generates application security checklists based on the OWASP Top 10.
Threat Model Generator
Security
Generates threat model documents with STRIDE analysis.