Chainstack is the leading suite of services connecting developers with Web3 infrastructure

• Homepage • Supported protocols • Chainstack blog • Blockchain API reference •
• Start for free •

Sandwich attacks on Elysium

Elysium is an Arbitrum Nitro chain that settles to HyperEVM. It opened as a private mainnet with early-access trading and went public on Nov 9, 2026. Bots sandwiched thousands of trades, almost all before the public launch. This repository measures who did it and what the victims lost, from chain data alone.

Read the report: chainstacklabs.github.io/elysium-sandwich-report

What's here

• docs/index.html — the report: findings, operators, victims, targets and method
• data/sandwiches.csv — every sandwich, one row each, with transactions, operator, loss and profit
• sandwiches/ — the Python package that builds both from chain data

Run

Needs Python 3.12+, uv and an Elysium mainnet archive endpoint with debug_* methods.

export ELYSIUM_RPC_URL=https://...
uv run python -m sandwiches

The first run starts at block 1, makes about 7,000 batched requests and takes about 40 minutes. Later runs fetch only new blocks; the cache lives in cache/. To rebuild the report and the CSV from the cache alone:

uv run python -m sandwiches report

License

Apache 2.0