Skip to content
Back to skills

Reviewing Mev Ordering And Slippage

ASecurity

Review MEV, ordering, and slippage: missing minOut/deadline, approve races, auction sniping, commit-reveal skips. Use for AMMs, launches, Dutch auctions, and any tx-order-sensitive value path. Analysis only - no sandwiching.

  • 3 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 2, 2026
ai-agents

Security analysis

A100/100

Scanned September 2, 2026

npx -y skills add nuroctane/nur-cli --skill reviewing-mev-ordering-and-slippage --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Reviewing Mev Ordering And Slippage?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Reviewing Mev Ordering And Slippage
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/nuroctane-reviewing-mev-ordering-and-slippage/badge)](https://www.skillsdirectory.com/skills/nuroctane-reviewing-mev-ordering-and-slippage)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: reviewing-mev-ordering-and-slippage
description: "Review MEV, ordering, and slippage: missing minOut/deadline, approve races, auction sniping, commit-reveal skips. Use for AMMs, launches, Dutch auctions, and any tx-order-sensitive value path. Analysis only - no sandwiching."
---

# Reviewing MEV, ordering, and slippage

SWC-114. Whitehat analysis. Do not sandwich users or send attacking bundles.

## Checklist

- Swaps/mints: `amountOutMin` / `minShares` and `deadline` (or block-based analogue).
- ERC-20 `approve` race - `forceApprove` / `permit`.
- Dutch auction / IDO: last-block sniping, missing commit-reveal.
- Oracle updates in the same block as a liquidation (`reviewing-oracles-and-pricing`).
- `block.timestamp` used as randomness (SWC-116/120) for a payout.
- Relayer gas griefing (SWC-126) on meta-txs.

## Report shape

Impact is usually user-level sandwich (Medium) unless the protocol itself can be drained by ordering (High). Say who loses: LP, trader, or protocol.

Tests: `vm.prank` two actors in chosen order; assert the victim still gets `minOut` or the tx reverts.

## Paid bounty analogs

| Note | Protocol | Pack |
|------|----------|------|
| Deposit front-run class (also-paid) | Rocket Pool / Lido | T25 |
| Tick compression / unsubscribe Mediums | Uniswap v4 periphery (Spearbit 2024) | T15 / T25 |

Sandwich of a user swap is usually Medium unless the **protocol** can be drained by ordering.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.