Relay disclosed a vulnerability in its API that exposed pending order information before transactions were executed. MEV searchers (traders seeking transaction-ordering profits) used route states to carry out sandwich attacks (front-running and back-running a trade), affecting about 5,600 users. Attackers earned approximately $136,000, while the median user loss was about $11.88. Relay paid Outputlayer a $50,000 bug bounty and plans to automatically send about $312,000 in full compensation to affected users’ wallets without requiring applications.