Sandwich Clusters

The number of detected sandwich-attack clusters in the analyzed window. A direct measure of MEV bot activity.

Sandwich clusters are the number of detected sandwich-attack groupings in a given block window. A sandwich attack works by a bot surrounding an ordinary user's trade with two of its own orders: it buys just before it (pushing the price up), lets the victim execute at a worse rate, then sells just after, pocketing the difference. It is one of the most common forms of MEV (Maximal Extractable Value) and a direct cost to retail. The cluster count feeds into the aggregate MEV risk score, but as a raw number it says the most in context: a rising cluster count means bots are actively hunting retail trades, while a small and stable one is typical network background. Compare it with the number of analyzed blocks and the total DEX trades. The clusters' share of the whole shows the real scale of the problem, not just the incident count.

In plain words

Counts how many times bots „sandwiched” ordinary users' trades to profit at their expense. The more there are, the less safe trading is.

Example

The sandwich-cluster count rises from 5 to 40 in one window. Bots are actively hunting, so cap slippage and split large orders. A steady, small cluster count is typical background that needs no reaction.

Also known as: klastry sandwich, sandwich clusters, atak sandwich, sandwich attack

Back to the glossary