In this tutorial, we will be using Scaffold-ETH x BuildBear to interactively showcase how to Perform a Sandwich Attack on UniSwapV2 on a fork of the Ethereum Mainnet.<h2>What is Sandwich Attack?</h2>In a sandwich attack scenario, the attacker monitors the mempool (a list of pending transactions) for a target transaction that they want to exploit. Once they identify the target, they submit two transactions — one before and one after the target transaction — surrounding it like the bread in a sandwich.<h2>How does Sandwich Attack Performed?</h2>A Sandwich Attack is orchestrated through a sequence of steps aimed at exploiting price volatility in a decentralized exchange, such as Uniswap. Here's how the attack is executed:<ul><li>Monitoring the Mempool: The attacker begins by closely observing the mempool, which is a pool of pending transactions yet to be confirmed on the blockchain. Within this mempool, the attacker is on the lookout for a specific transaction – the "target" – which they can capitalize on.</li><li>Identifying the Target: The target transaction is one that involves a significant trade, often with a substantial quantity of tokens. This transaction's pending status in the mempool provides a window of opportunity for the attacker to take advantage of potential price fluctuations.</li><li>Preparing the Sandwich: Once the target transaction is spotted, the attacker quickly acts by submitting two transactions of their own. These transactions are strategically timed to be included in the block before and after the target transaction. This creates a situation where the target transaction is "sandwiched" between the attacker's transactions.<ul><li>Frontrun Transaction: The attacker's first transaction, known as the frontrun transaction, occurs before the target transaction. In this step, the attacker may perform a token swap, altering the price of the tokens involved in the upcoming target transaction.</li><li>Backrun Transaction: The attacker's second transaction, called the backrun transaction, occurs after the target transaction. Here, the attacker may execute a reverse token swap, aiming to capitalize on the altered price.</li></ul></li><li>Manipulating the Price: By executing these two transactions surrounding the target transaction, the attacker's objective is to manipulate the price of the token. The altered price can lead the user involved in the target transaction to receive a different quantity of tokens than they initially anticipated.</li><li>Profiting from Price Fluctuation: The attacker aims to profit from the price variation caused by their strategic transactions. Depending on whether the price was driven up or down due to the attack, the attacker can gain by either purchasing tokens at a lower price or selling them at a higher price.</li></ul>By following this tutorial, you will learn how to Perform a Sandwich Attack on UniSwapV2.Let's get started!Getting StartedThis tutorial was developed using scaffold-eth x BuildBear repository, which has now been archived. For updated tutorials, please refer to the <a href="https://github.com/BuildBearLabs/Scaffold-Eth-2-BuildBear">scaffold Eth2 x Buildbear</a> repo. You can find the latest code and instructions in the updated repository.Here’s why we recommend using scaffold-eth2 x BuildBear:<ul><li>It allows you to easily fork EVM-compatible chains (such as Ethereum, Polygon, Binance Smart Chain, Fantom, Optimism, and Arbitrum Mainnet) directly from the CLI. Saving you valuable time that would otherwise be spent searching for working RPCs.</li><li>You can mint native and ERC20 tokens effortlessly using the CLI, eliminating the need to waste time searching for functional faucets.</li></ul>To get started, click on the "Fork" button to create a copy of the repository on your own GitHub account. Please wait for the forking process to complete before proceeding.Next, open a terminal and clone the forked repository, which includes all the necessary components for building a decentralized application:<pre><code class="language-plaintext">git clone &lt;paste the URL you fork repo&gt;
cd Scaffold-Eth-2-BuildBear</code></pre>To install all the required packages, execute the following command:<pre><code class="language-plaintext">yarn install</code></pre>To execute the Flashloan Arbitrage, we can leverage the existing Aave Protocol and DEXs by forking the Ethereum Mainnet instead of redeploying these protocols.use the following command:<pre><code class="language-plaintext">yarn fork-bb</code></pre><figure class="image"><img src="https://strapi.buildbear.io/uploads/Untitled_637f2e7bc5.gif" alt="Untitled.gif"></figure>Deploying the contracts<pre><code class="language-plaintext">yarn deploy</code></pre><figure class="image image_resized" style="width:75%;"><img src="https://strapi.buildbear.io/uploads/Untitled_352bf06d7b.png" alt="Untitled.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_Untitled_352bf06d7b.png 245w,https://strapi.buildbear.io/uploads/small_Untitled_352bf06d7b.png 500w,https://strapi.buildbear.io/uploads/medium_Untitled_352bf06d7b.png 750w,https://strapi.buildbear.io/uploads/large_Untitled_352bf06d7b.png 1000w," sizes="100vw"></figure>🚨&nbsp;If you are using a Node version &lt; v18 you will need to remove&nbsp;<code>openssl-legacy-provider</code>&nbsp;from the&nbsp;<code>start</code>&nbsp;script in&nbsp;<code>package.json</code> Starting the frontend<pre><code class="language-plaintext">yarn start </code></pre>Once the application is running, you can access it at <a href="http://localhost:3000">http://localhost:3000</a> and you should see the following:<figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/Screenshot_from_2024_04_01_09_55_26_4daff5f007.png" alt="Screenshot from 2024-04-01 09-55-26.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_Screenshot_from_2024_04_01_09_55_26_4daff5f007.png 245w,https://strapi.buildbear.io/uploads/small_Screenshot_from_2024_04_01_09_55_26_4daff5f007.png 500w,https://strapi.buildbear.io/uploads/medium_Screenshot_from_2024_04_01_09_55_26_4daff5f007.png 750w,https://strapi.buildbear.io/uploads/large_Screenshot_from_2024_04_01_09_55_26_4daff5f007.png 1000w," sizes="100vw"></figure>Before diving deeper into the smart contract, let's start by exploring the functionalities of SandwichAttack. To begin, navigate to the SandwichAttack page.<figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/Screenshot_from_2024_04_01_10_29_01_37cc23cdb5.png" alt="Screenshot from 2024-04-01 10-29-01.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_Screenshot_from_2024_04_01_10_29_01_37cc23cdb5.png 245w,https://strapi.buildbear.io/uploads/small_Screenshot_from_2024_04_01_10_29_01_37cc23cdb5.png 500w,https://strapi.buildbear.io/uploads/medium_Screenshot_from_2024_04_01_10_29_01_37cc23cdb5.png 750w,https://strapi.buildbear.io/uploads/large_Screenshot_from_2024_04_01_10_29_01_37cc23cdb5.png 1000w," sizes="100vw"></figure>On the SandwichAttack Page, you have the option to execute three key transactions: the Frontrun transaction, the User transaction, and the Backrun transaction.Let's dive deep into the Smart contractWe can find <code>SandwichAttack.sol</code> contract in&nbsp;<code>packages/hardhat/contracts</code>:<figure class="image"><img src="https://strapi.buildbear.io/uploads/carbon_5_5fee2ca5d3.svg" alt="carbon (5).svg"></figure>Let's break down the key components and functionalities of the contract:Import and Interface:<ul><li>The contract imports the <code>IERC20</code> interface from the OpenZeppelin ERC20 library, which provides standard functions for ERC20 tokens.</li><li>The contract declares an interface <code>IUniswapV2Router02</code> for the UniswapV2 router's swap function. This interface represents the interaction with the UniswapV2 router's swapping functionality.</li></ul>Frontrun Function:<ul><li><code>frontrun</code>: A function that executes the first step of the sandwich attack. It swaps <code>amount</code> of <code>token0</code> for <code>token1</code> on UniswapV2.</li><li>The function requires that the balances of both <code>token0</code> and <code>token1</code> in the contract are higher than <code>amount</code>.</li><li>The function approves the UniswapV2 router to spend <code>maxValue</code> of both <code>token0</code> and <code>token1</code>.</li><li>It sets up the token swap path and parameters, including the minimum amount of <code>token1</code> expected (<code>amountOutMin</code>) and a deadline for the swap (<code>deadline</code>).</li><li>The function executes the token swap and stores the resulting amounts.</li></ul>Backrun Function:<ul><li><code>backrun</code>: A function that performs the second step of the sandwich attack. It swaps the remaining balance of <code>token0</code> back for <code>token1</code>.</li><li>It sets up the token swap path and parameters, including a minimum amount of <code>token1</code> expected (which is set to 0) and a deadline for the swap.</li><li>The function then executes the token swap and stores the resulting amounts.</li></ul>Initiating a Sandwich Attack: A Step-by-Step GuideTo truly understand the mechanics of a Sandwich Attack, let's delve into its execution and intricacies.1. Preparing the <code>sandwichAttack</code> Contract:we need to ensure the <code>sandwichAttack</code> contract is appropriately funded with the tokens we intend to manipulate. As shown below.<figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/Untitled_3_39f2124d65.png" alt="Untitled 3.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_Untitled_3_39f2124d65.png 245w," sizes="100vw"></figure>2. Executing the Front-Run Attack:Our next move involves executing the front-run attack, as shown below :<figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/Untitled_4_3b5e0bfe18.png" alt="Untitled 4.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_Untitled_4_3b5e0bfe18.png 183w,https://strapi.buildbear.io/uploads/small_Untitled_4_3b5e0bfe18.png 500w," sizes="100vw"></figure><figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/Untitled_5_c9fa78b287.png" alt="Untitled 5.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_Untitled_5_c9fa78b287.png 245w,https://strapi.buildbear.io/uploads/small_Untitled_5_c9fa78b287.png 500w," sizes="100vw"></figure><ul><li>User Transactions :</li></ul>Here, we are swapping <code>100000000</code> DAI tokens for UNI Tokens. However, due to the front-run attack, the outcome diverges significantly from expectations. As displayed, the result is a mere <code>0.062</code> UNI tokens for the substantial <code>100000000</code> DAI tokens.<figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/Untitled_6_bc0016ac37.png" alt="Untitled 6.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_Untitled_6_bc0016ac37.png 245w,https://strapi.buildbear.io/uploads/small_Untitled_6_bc0016ac37.png 500w," sizes="100vw"></figure><ul><li>Executing the Back-Run Attack:</li></ul>Here, we are swapping <code>200000000.0</code> UNI tokens for <code>200008627</code> DAI Tokens.<figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/Untitled_7_a78c026e27.png" alt="Untitled 7.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_Untitled_7_a78c026e27.png 245w,https://strapi.buildbear.io/uploads/small_Untitled_7_a78c026e27.png 500w," sizes="100vw"></figure>🎉🎉 Congratulations!We have successfully executed a Sandwich Attack, effectively altering the token prices within UniswapV2 pools.If you appreciate what we are doing, please follow us on&nbsp;<a href="https://twitter.com/_BuildBear">Twitter</a>, and&nbsp;<a href="https://www.linkedin.com/company/build-bear/">LinkedIn</a>&nbsp;and&nbsp;<a href="https://t.me/+6mjOnBFUR9xjN2U1">Join the Telegram</a>&nbsp;group if you haven’t done yet.Github Repo:&nbsp; <a href="https://github.com/BuildBearLabs/Scaffold-Eth-2-BuildBear">scaffold-eth2 x BuildBear</a>About BuildBear:BuildBear is a platform for testing dApps at scale, for teams. It provides users with their own private Testnet to test their smart contracts and dApps, which can be forked from any EVM chain. It also provides a Faucet, Explorer, and RPC for testing purposes.<blockquote>BuildBear aims to build an ecosystem of tools for testing dApps at scale for the teams.</blockquote>Check out the projects we build on <a href="https://github.com/BuildBearLabs/Scaffold-Eth-2-BuildBear">scaffold-eth2 x BuildBear</a> and keep learning :<ol style="list-style-type:decimal;"><li><a href="https://www.buildbear.io/resources/guides-and-tutorials/Build_Your_Own_Decentralized_Lending_Protocol">Build Your Own Decentralized Lending Protocol</a></li><li><a href="https://www.buildbear.io/resources/guides-and-tutorials/Build_your_own_Decentralized_Exchange">Build your own Decentralized Exchange</a></li><li><a href="https://www.buildbear.io/resources/guides-and-tutorials/Flashloan_Arbitrage_BoT">A Comprehensive Step-by-Step Guide for Building a Flashloan Arbitrage Bot</a></li><li><a href="https://www.buildbear.io/resources/guides-and-tutorials/LP_on_UniSwapv3">Learn How to Create Liquidity Pools on UniswapV3 for New ERC20 Tokens</a></li></ol>Author: <a href="https://twitter.com/chandan1_">chandan</a>

sandwich.png

In a sandwich attack scenario, the attacker monitors the mempool (a list of pending transactions) for a target transaction that they want to exploit. Once they identify the target, they submit two transactions — one before and one after the target transaction — surrounding it like the bread in a sandwich.

Learn How to Perform a Sandwich Attack

BUILDBEAR // TUTORIALS

Learn How to Perform a Sandwich Attack

Let’s get started then, Shall we?

Let’s get started then, Shall we?

Test DApps at Scale.