News

According to Jinse Finance, data from EigenPhi shows that sandwich attacks on the Ethereum network in 2025 have resulted in user losses of nearly $40 million. Although the monthly trading volume on decentralized exchanges (DEX) has soared from $65 billion to over $100 billion, the scale of profits from these attacks has dropped significantly. Monthly profits from sandwich attacks have decreased from about $10 million at the end of 2024 to only $2.5 million in October 2025, while the frequency of attacks remains high at 60,000 to 90,000 times per month. Most notably, 38% of the attacks target low-volatility liquidity pools such as stablecoins and wrapped assets, and 12% of the attacks are aimed at stablecoin swap pools—where slippage exceeds expectations and losses are particularly severe. The average profit per sandwich attack is only $3, and in 2025, only six attackers accumulated profits of more than $10,000 for the entire year.

Jinse Finance reported that 23pds, Chief Information Security Officer of SlowMist, tweeted that given the emergence of new attack chains for the latest remote code execution vulnerability in React/Next.js, the success rate of related attacks will increase significantly. Since a large number of DeFi platforms currently use React, this vulnerability may have a wide-ranging impact, and all DeFi platforms need to guard against related security risks.