$2M Vanishes in Same‑Block Backrun Exploit That Could Have Been Avoided, Says Analyst

TL;DR:

• A same-block backrun extraction exploit left a trader with just $14,500 after swapping $2.01 million worth of Ethereum on a DEX.
• Titan Builder was the biggest beneficiary of the exploit, pocketing $1.8 million as a reward for building the block on Ethereum.
• GoPlus Security confirmed the transaction was routed to a low-liquidity pool on Uniswap v3, causing a 99.3% loss of capital.

A trader who executed a swap of 1,126.44 ETH on a decentralized exchange ended up with just $14,500 in tokens after a router directed the order to a low-liquidity pool, allowing an Ethereum block builder to pocket the difference. The exploit, classified as a same-block backrun extraction and recorded on Monday, July 7 at 1:59 am UTC, resulted in a net loss of $2.01 million in a single transaction.

According to GoPlus Security, the transaction routed approximately 1,117 ETH into an AVAIL/WETH pool with very low liquidity on Uniswap v3. This caused the trade to execute at a price 120 times higher than AVAIL’s actual market value. The trader received roughly 6.67 million AVAIL tokens at an artificially inflated price, which were then swapped for LIT tokens worth just $14,200.

Someone swapped 1,126.44 $ETH($2.01M) for only 5,776 $LIT($14,208), losing nearly $2M! https://t.co/T86wIi7T76 pic.twitter.com/0ETOQ2ApR6

— Lookonchain (@lookonchain) July 6, 2026

The Main Beneficiary of the Exploit

Titan Builder was the party that capitalized most on the error. The router involved, identified as the 0x router, sold a small amount of AVAIL obtained externally within the same pool to extract approximately 1,072 WETH, of which 1,018 ETH, equivalent to $1.8 million, were transferred to Titan as a block-building reward. GoPlus Security clarified that the incident was not a classic sandwich attack, but rather “a textbook case of backrun extraction within the same block” — a technically crucial distinction for this type of exploit.

Titan provided no details and did not respond to any questions following the incident. According to DefiLlama data, the company has accumulated $112.6 million in revenue from block building services throughout 2026. Its most profitable day of the year came in March, when it extracted around $34 million in arbitrage gains from an incident involving MEV bots on the CoW protocol.

Don’t Sign Blindly on a DEX

This exploit once again exposed the risks posed by maximal extractable value (MEV) bots and liquidity routers, a threat that operates alongside hackers and scammers. Trader Ruslan Khairullin noted that the loss was avoidable: “This is what happens when you confirm faster than you read the route. A painful lesson to watch in real time.” This warning points directly at the practice of signing transactions on any DEX without reviewing the path the capital will take before executing the swap.