Jito Removes 15 Solana Validators Following Discovery of MEV Exploits

Jito, a leading Solana-based block-building and liquid staking platform, has banned 15 validators from receiving JitoSOL stake following evidence of their involvement in widespread sandwich attacks. The decision follows an in-depth report from blockchain researchers revealing that as many as 6% of all proposed Solana blocks contained these manipulative transactions, which primarily targeted retail traders through the reordering of trades for profit.

Sandwich attacks occur when validators or block builders front-run and back-run user transactions—buying before and selling after a retail trade—to exploit price slippage. The report showed that such behavior has become a systemic problem within Solana’s decentralized exchange ecosystem. Over the past year, approximately 529,000 SOL, equivalent to tens of millions of dollars, has been extracted from unsuspecting users. Researchers estimate that 222,272 individual traders have been affected, most of them participating in high-volume meme coin markets.

A striking development in this trend is the rise of “wide sandwich attacks,” sophisticated versions that span multiple slots instead of a single block. Data from 0xGhostLogs indicated that 93% of all attacks now follow this model, allowing validators to evade detection while exploiting the high transaction throughput Solana is known for. Some validators were found to have proposed blocks in which up to 12% of transactions displayed signs of sandwiching behavior.

Jito’s Blacklist Committee, responsible for maintaining the integrity of JitoSOL staking operations, acted swiftly after the findings were published. The 15 banned validators were implicated in patterns of front-running and transaction manipulation, with some reportedly subsidized through staking pools associated with major Solana infrastructure providers. Jito stated that the action was essential to “uphold transparency and protect stakers and traders from unethical block production practices.”

The use of private mempools—exclusive data channels that share pending transactions among validators—has facilitated much of the collusion behind these attacks. According to analysts, such networks allow participants to monitor high-value trades and coordinate insertion of their own transactions for profit. Platforms most affected include Axiom, Bloom, and Photon, where meme coin trading has become particularly vulnerable to exploitation due to open and traceable order flows.

Despite the economic incentive to engage in these activities, the reputational and operational costs for validators are mounting. Each banned node loses access to JitoSOL stake rewards, which represent a significant source of validator income. The bans serve as a warning to other operators on Solana to adhere strictly to ethical block-building standards and avoid any form of transaction manipulation.

Jito’s enforcement marks a critical moment in Solana’s effort to maintain trust amid growing concerns about MEV extraction. As decentralized trading volumes rise, researchers and validators are calling for stronger coordination, improved monitoring tools, and governance mechanisms to safeguard retail participants. The initiative signals a maturing ecosystem that is beginning to confront and correct the systemic vulnerabilities inherent in high-speed blockchain environments.