Arbitrum (Product): news timeline & CVEs

No Place to Hide: An Analysis on Protected Order Flow Sandwich Attacks

Study finds millions of sandwich attacks against supposedly protected order flow across six blockchains.

A three-year measurement study analyzes sandwich attacks against protected order flow on Ethereum, Solana, Tron, Base, Arbitrum, and Monad. It reports 28.0 million attacks on Solana, 38,567 on Tron, 30,607 on Ethereum, and 1,889 on Base, plus 2,875 further Ethereum victims exposed by reorganized blocks. Unlike public-mempool sandwiches, these rarely sit tightly around victims and, outside Solana, come from few entities. Cited exposures include Solana validator and application leaks, Ethereum order-flow auctions and reorgs, Tron latency front-running, and a Base RPC bug with predictable victim behavior.

arXiv cs.CRSep 23, 13:45 UTC · 3d agoResearch in the wild

Graphalgo Malware Uses Malicious Terraform Providers and Go Modules to Deploy RAT

Graphalgo malware expands supply-chain attacks to Terraform providers and Go modules, using Slack and blockchain for C2.

The Graphalgo malware campaign has expanded its supply-chain attack vector beyond npm and PyPI to include malicious Terraform providers and Go modules. This marks the first observed case of malware distribution through Terraform providers, directly targeting infrastructure-as-code workflows. The malware deploys a Go-based RAT that uses Slack API and Arbitrum Sepolia testnet blockchain for command-and-control, with activation gated by cryptographic hashes to target specific victims.

GBHackersupdated Sep 23, 18:06 UTC · 3d agofirst Sep 23, 10:00 UTC · 3d agoMalware in the wild 4 sources

SkelOT: Reusing AOT Compilation Across EVM Contract Families

SkelOT reuses one native AOT artifact per EVM contract family, cutting Base compile units by 47.5%.

Ahead-of-time EVM compilers such as revmc, evmone, and DTVM reuse artifacts only by code hash, even though factory, proxy, and template deployments share instruction structure and differ mainly in constants. Across Base, Ethereum, BSC, and Arbitrum, 23.1-47.6% of unique compilable bytecodes mapped to shared family skeletons in 10K-block windows. SkelOT, built on revmc and LLVM, compiles one native artifact per family and loads variant constants from a per-contract table. On a 10K-block Base corpus of 3.52 million transactions it cut compilation units 47.5%, artifact footprint 57.4%, and compile time 2.19x, with a 1.31x median per-contract speedup and byte-identical execution.

arXiv cs.CRSep 21, 10:55 UTC · 5d agoResearch

Arbitrum

Timeline3 articles

Appears with

No Place to Hide: An Analysis on Protected Order Flow Sandwich Attacks

Graphalgo Malware Uses Malicious Terraform Providers and Go Modules to Deploy RAT

SkelOT: Reusing AOT Compilation Across EVM Contract Families