More than 28 million protected-flow sandwich attacks were detected on Solana from July 2023 to June 2026, involving 8,631 bots and generating about $345 million in profit after fees. The findings come from the first multi-year academic study of protected order-flow attacks across major blockchains, published on arXiv on September 23, 2026. Researchers from Category Labs, ETH Zurich, Flashbots, and the University of Lisbon analyzed Ethereum, Solana, Tron, Base, Arbitrum, and Monad. Using an excess ratio to compare application exposure with a statistical baseline, the study found substantially lower attack exposure among Jupiter Ultra users than users of several competing Solana applications. Jupiter Ultra recorded ratios of 0.7 overall and 2.0 in single-victim scenarios, compared with 18.9 for Axiom, 11.1 for Photon, and more than 10 for both BullX and GMGN. Jupiter attributes the difference to Ultra V3, launched on October 17, 2025, along with private routing, dynamic slippage management, route comparisons, Iris meta-aggregation, and Ultra Signaling. JUP fell 9.49% to about $0.337 after rising from roughly $0.22 to nearly $0.372, an advance of approximately 69%. The token’s cited support levels are $0.32, $0.30, and about $0.29, while a move above $0.35 and then the recent $0.37-$0.38 peak would improve the short-term technical picture. The study said application design can materially affect users’ exposure, although Jupiter Ultra has not eliminated sandwich attacks and validators remain an exposure vector.