Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
FREEDOM251

Freedom251 › Blog › crypto security

What to Do After a Sandwich Attack Causes a Bad Solana Swap

By Freedom251 Team · · 8 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

First, preserve the transaction evidence and verify what actually happened on-chain. A completed swap that returned fewer tokens than quoted generally cannot be reversed from your wallet. Your next steps are to distinguish execution loss from a compromised account, contact the service you used with the transaction signature, and revoke a token delegate only if the transaction or account review shows an unauthorized delegate.

Start with a calm, evidence-first response

A poor fill is alarming, but it does not by itself prove that your wallet was drained or that your signing key was stolen. In a sandwich attack, a searcher places a trade before your pending swap, your swap executes at a worse price, and the searcher trades again afterward. The direct damage is usually execution loss: you receive fewer tokens or pay more than the pre-trade quote allowed for.

As an Amazon Associate I earn from qualifying purchases.

Do not send your seed phrase or private key to anyone promising to recover the funds. Save the facts before changing anything in the wallet or trying another swap.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Save the incident record

  • The wallet address that signed the transaction.
  • The complete Solana transaction signature.
  • The mint address of each input and output token.
  • The exact amount sent and the amount received.
  • The time of the transaction, including the relevant time zone if you have it.
  • The quoted amount, minimum output, price impact, route, and slippage setting, if the app displayed them.
  • The name of the wallet, swap interface, aggregator, or other service that submitted the transaction.
  • Screenshots or exported details of the quote and confirmation screen.

Keep this information private except when submitting it to the official support channel for the service you used. A transaction signature is useful for investigation; a seed phrase is not a support credential and should never be shared.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Check the transaction before deciding what went wrong

Open the signature in a Solana block explorer and inspect the transaction as a record of instructions and state changes, not just the headline status.

  1. Confirm the status. Determine whether the transaction succeeded, failed, or is still pending. A failed instruction causes the transaction’s state changes to revert, whereas a confirmed successful swap changes token balances.
  2. Read the instructions. Identify the programs called, the accounts involved, and the actual swap route. Check that the instructions match the wallet action you intended.
  3. Compare token balance changes. Record the exact input debit and output credit. A successful transaction with an unfavorable exchange rate is different from an unauthorized transfer.
  4. Inspect nearby activity. Compare trades around the same time and token pool. A buy immediately before your swap and a sell afterward can support a sandwich explanation, but an unfavorable result alone does not establish one.
  5. Look for unrelated changes. Pay particular attention to transfers, token-account operations, or delegate changes that you did not authorize.

Solana transactions execute their instructions together. If an instruction fails, the transaction’s state changes are reverted, so a failed transaction should not be treated as a completed swap simply because a wallet displayed an error after submission.

Use the result to classify the incident

What the record shows Most likely interpretation What to do next
Confirmed swap, expected tokens only, but output is poor Execution loss; a sandwich is possible but not proven Save the quote and signature, then contact the swap provider
Failed transaction with no lasting balance changes The swap did not complete; state changes reverted Check whether you lost a network fee and investigate any repeated failures before retrying
Confirmed transaction includes an unfamiliar transfer Possible account or signing compromise, separate from execution quality Stop signing new transactions and review the affected account and credentials
Confirmed transaction shows an unfamiliar token delegate Unauthorized delegated authority may exist Revoke that delegate through a trusted Token Program-compatible control

Can you reverse a completed Solana swap?

There is no wallet control that reverses a completed, confirmed swap. The reviewed Solana and provider documentation describes prevention, transaction failure, and limited support remedies; it does not describe a user-side undo operation for a completed unfavorable trade.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If the transaction succeeded, the tokens have already moved according to the swap instructions. Trading back into the original asset is a new market transaction. It can create another price impact, incur another network fee, and compound the loss; it does not restore the original execution.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

A failed transaction is the important exception in terminology, not a reversal feature. When an instruction fails and the transaction reverts its state changes, the intended swap did not settle. You may still have paid a network fee, depending on how the transaction was processed, but you should not expect a completed token exchange in the balances.

Contact the service that submitted the swap

Send official support the transaction signature, wallet address, token mints, amounts, time, quote, slippage setting, and screenshots. Ask them to review routing, execution, and any available incident or compensation policy. Do not describe the event as a confirmed sandwich unless the transaction and surrounding trades support that conclusion.

What Jupiter’s published support examples mean

Jupiter’s support information says users may be eligible for compensation in limited situations, including bad routing, more than three consecutive failed trades that caused gas loss, or unusually high slippage above 20% that led to sandwich attacks. These are conditional examples, not a promise that every bad fill or every sandwich allegation will be reimbursed. Eligibility depends on the provider’s review of the specific transaction and circumstances.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If you used another interface, contact that interface rather than assuming an aggregator or wallet can intervene. A provider cannot generally rewrite a settled Solana transaction, but it can investigate its route, quote, logs, and internal submission record and tell you whether its support policy applies.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord | 6.35mm Jack, Durable Design, Stage and Home Studio Use, Low Noise Shielded Electric Cord for Bass, Keyboard, Amp, Mixer
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Should you revoke token approvals after a bad swap?

Revoke a delegate only when you find a delegate that should not have authority. A sandwich attack by itself is not evidence that an unwanted delegate exists.

Under Solana’s Token Program, the revoke operation clears the current delegate and its delegated amount. That ends the delegate’s authority to transfer or burn tokens for that token account. It is a security measure for unauthorized delegated control, not a way to restore value lost through a poor exchange rate.

  1. Inspect the affected token account and identify whether a delegate is present.
  2. Verify that the delegate address and delegated amount are not part of a permission you intentionally granted.
  3. Use your wallet’s trusted revoke control or another Token Program-compatible tool to clear the delegate.
  4. Confirm the resulting account state on-chain.

If the transaction contains an unfamiliar transfer, approval, or delegate and you cannot explain it, treat that as a separate security incident. Stop signing unrelated transactions while you review the account, and use only official support or a trusted security professional. Never hand over a seed phrase as part of that review.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What a sandwich attack is—and what it is not

The attack depends on transaction ordering. A searcher detects a pending swap, buys before it, lets the user’s trade execute against the changed market, and sells afterward. The user’s minimum-output protection determines whether the transaction still succeeds; a loose tolerance can allow a larger adverse move, while a tight tolerance can make the transaction fail instead.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Solana’s architecture reduces exposure compared with chains that rely on broadly visible public mempools, but it does not eliminate extraction. Sandwiches can occur through Jito bundles. That fact still does not make every disappointing swap a sandwich: ordinary volatility, shallow liquidity, a large trade, route changes, and stale quotes can also produce a poor fill. Use the signature, balance changes, route, and neighboring trades to separate those explanations.

What the published measurements show

A study presented at the ACM Internet Measurement Conference in 2025 identified 521,903 sandwich attacks during its measurement period. For the subset of trades involving SOL that the authors could value, they estimated at least $7,712,138 in aggregate user losses. The estimate is a lower bound because 28% of the identified attacks did not involve SOL and could not be valued using that method.

The same study reported that identified attacks fell from more than 15,000 per day near the beginning of its observation period to roughly 1,000 per day near the end. Those are historical study-period measurements, not a live 2026 incident rate and not a prediction of what happened to your transaction.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Reduce the chance of another bad fill

Set slippage for the actual market

Slippage tolerance is the maximum adverse price movement your swap will accept before failing. A tighter limit is the most effective general defense against sandwich attacks in Solana’s guidance because it limits how much worse the execution may become. The trade-off is failure: if ordinary market movement exceeds the limit, the transaction will not complete.

Choose the tolerance with the token pair’s volatility, liquidity, and trade size in mind. A setting suitable for a deep, liquid pair may be too tight for a thin market, while a very wide setting gives an attacker more room and can hide an unfavorable fill. Always read the displayed minimum output before signing.

Evaluate MEV-protection routes accurately

Some swap interfaces offer routes intended to reduce transaction-ordering attacks. Jito’s DontFront mechanism is an integration feature, not a universal wallet switch: the transaction must include a valid public key beginning with jitodontfront in an instruction and must be submitted through the Jito block engine. Solana’s Cookbook documentation notes that the Jito endpoint is required rather than a standard RPC node.

Do not assume that a wallet setting, a generic private transaction option, or any route automatically invokes DontFront. Confirm that the service supports the mechanism and that the transaction was actually sent through the required endpoint.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Jito states that the feature may reduce sandwich attacks but is not guaranteed and does not cover every transaction-ordering variation, including ordering conducted by third parties. Compare the likely execution quality, failure risk, and any fee or tip shown by the service before choosing it.

Check the quote before signing

  • Review the expected output and the minimum output, not just the input amount.
  • Check price impact and the complete route through liquidity sources.
  • Confirm that the token is tradable and that the route has sufficient liquidity.
  • Read the error category if a transaction fails. Routing, insufficient funds, slippage, and token-tradability errors require different fixes.
  • Check whether the protection route is supported by the wallet, service, and actual transaction path.
  • Review any service fee or validator tip shown before approval.

A route that looks best on paper is not best for every token, market, or user. The practical choice balances minimum-output protection against the chance of a harmless failure, while verifying that any advertised MEV protection is genuinely active.

A simple decision path for this incident

  1. Preserve evidence: signature, wallet, mints, amounts, quote, time, and service.
  2. Verify settlement: distinguish a reverted transaction from a confirmed swap.
  3. Inspect for unauthorized activity: transfers, approvals, and delegates that do not belong to the intended trade.
  4. Escalate to the correct provider: submit the evidence through its official support channel and ask about the applicable policy.
  5. Revoke only unwanted authority: clear an unauthorized delegate, but do not expect revocation to recover swap losses.
  6. Change future execution settings: use an appropriate slippage limit, verify minimum output and route, and confirm any MEV-protection integration before signing.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

crypto securityMEVsandwich attacksSolanaswap troubleshootingtoken approvals

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.