Sanctuary Compliance Desk

The DOJ's theory, per public charging documents and the DL News post-trial reporting:
**Wire fraud**: the brothers used interstate wire communications (the Ethereum network's peer-to-peer infrastructure operates across state and international lines) in furtherance of a scheme to deprive Flashbots relay users of property — specifically, the value of the arbitrage opportunity the bundle had identified.
**Money laundering**: the proceeds of the alleged fraud were moved through cryptocurrency mixers and exchanges, satisfying the predicate-offense and laundering-act elements of 18 U.S.C. § 1956.
The technical structure of the case required jurors to understand: how Flashbots relay works, what an MEV bundle is, why pre-execution visibility is supposed to be restricted to the bundle's submitter, how the Peraire-Bueno brothers' validator-side manipulation gained that visibility, and why that visibility allowed them to capture an arbitrage opportunity they had not identified.
For jurors who do not work in cryptocurrency infrastructure, the explanation requires a sustained technical orientation. Per DL News, the trial included extended expert testimony — from Ethereum core developers, Flashbots staff, and DOJ-employed forensic specialists — that produced juror confusion and fatigue rather than consensus.
The jury could not decide whether the brothers had "stolen" something, in the legal sense, when what they had done was reorder transactions on a public blockchain in a way that produced personal profit at others' expense. The conduct was sophisticated. The harm was real. Whether the harm constituted federal wire fraud was, after the trial, an open question.
Avraham Eisenberg's October 2022 Mango Markets extraction worked differently. He took a large position in MNGO perpetual swaps on Mango Markets, then manipulated the MNGO oracle price by aggressive trading on thin pools, then used the inflated MNGO valuation to borrow against his MNGO collateral and withdraw approximately $114 million from Mango's lending pools.
Eisenberg's defense in the original trial was that the conduct was "a highly profitable trading strategy" rather than market manipulation. The jury convicted in 2024. SDNY's May 23, 2025 ruling overturned the conviction.
The ruling was on procedural grounds — venue (the case had been tried in SDNY despite weak New York nexus) and insufficient evidence (the government had not adequately proved certain elements of the manipulation theory). The substantive question — is oracle manipulation against a permissionless on-chain protocol "fraud" or "manipulation" in the federal-statute sense — was left somewhat open by the ruling, which focused on procedural deficiencies rather than affirming the conduct's legality.
The combined effect of Eisenberg overturned + Peraire-Bueno mistrial is structural. The DOJ has prosecuted two of the highest-dollar, highest-profile MEV-extraction cases. Neither produced a sustained criminal conviction. The framework that DOJ has been using to charge these cases — wire fraud, money laundering, market manipulation by analogy — does not consistently produce jury convictions.
There are several plausible explanations for why this is happening.
**The conduct is technically novel.** Wire-fraud statutes were drafted before public blockchains existed. Applying them to on-chain transaction ordering is a stretch that requires jurors to accept analogical reasoning. Jurors trained on conventional fraud cases (someone misrepresented something to someone else, who relied on the misrepresentation and lost money) struggle with cases where the "victim" never interacted directly with the defendant and the "misrepresentation" is an exploitation of protocol mechanics.
**The market-manipulation framing fails on permissionless venues.** Conventional market manipulation requires a regulated market with rules the defendant violated. Permissionless on-chain protocols have no rules in that sense — they have code, and the defendant interacted with the code. The defense framing of "this is how the protocol works" plays in jury deliberations because, in a literal sense, it is how the protocol works.
**The harm is diffuse.** In conventional fraud cases, identifiable victims testify. In MEV cases, the harm is distributed across thousands of trades and hundreds of counterparties; there is no single victim who can describe what they lost. Distributed harm reads as smaller harm to a jury, even when the aggregate is significant.
**The technical complexity exhausts jurors.** A multi-week trial with extensive expert testimony about validator clients, mempool structure, and bundle relays produces fatigue. Fatigue produces hung juries.
The operational read for MEV operators — sandwich-attack bots like Vpe, arsc, B91; oracle-manipulation operators in the Eisenberg vein; Flashbots-relay exploiters in the Peraire-Bueno vein — is that the legal landscape in 2026 is uncertain in their favor.
The Peraire-Bueno retrial, if it proceeds, will be the next data point. If DOJ secures a clean conviction in the retrial, the calculus changes — the legal community will treat the conduct as federally prosecutable, and operators will need to factor criminal-exposure into their economic models. If the retrial also fails to produce a conviction, the operational read solidifies: MEV extraction at scale is, in practice, beyond US federal criminal reach.
For Solana sandwich-attack operators specifically — see our coverage of DeezNode and Vpe — the absence of US prosecutions has been the operating environment for the last two years. Vpe extracted approximately $13.43 million in 30 days; arsc extracted approximately $30 million across two months. Neither operator has faced US legal action despite public attribution.
The Marinade and Jito private-actor bans of approximately 65 validators are the closest the industry has come to operational consequence. These are private-actor decisions to deplatform — they do not produce financial penalties for the operators, and the operators can re-emerge under new validator identities.
For Sanctuary and adjacent compliance vendors, MEV-extraction wallets are tagged at the entity_type `mev_bot` with elevated risk weighting. The tag does not produce Critical-level scoring because the conduct is not legally classified as sanctioned, terrorism-related, or fraud-conviction-supported. The tag does provide compliance officers at exchanges and OTC desks the information that the counterparty's primary on-chain activity is MEV extraction.
The legal status — open question, two failed prosecutions — means compliance teams must make risk-based judgments without clear regulatory guidance. The conservative position is to treat MEV-operator wallets as elevated-risk for counterparty due diligence. The aggressive position would treat them as standard-risk.
In practice, major US-regulated exchanges have moved toward the conservative position. Coinbase and Kraken have not publicly delisted MEV-operator counterparties but have implemented heightened-scrutiny KYC for accounts whose on-chain activity matches MEV-operator signatures. The Asian exchange ecosystem — Binance, OKX, KuCoin, MEXC — has been less consistent.
For US policy, the gap is structural. Wire fraud is a statute drafted for telegraph and telephone-era misrepresentation. Money laundering operates on predicate offenses that require a legally-defined underlying crime. Market manipulation operates on regulated-market frameworks.
None of the existing statutes cleanly capture MEV-style on-chain extraction. The Peraire-Bueno mistrial confirms that adapting them via analogical reasoning produces inconsistent jury outcomes. Securing a clean MEV conviction at the federal level may require either: a successful retrial, a Supreme Court ruling clarifying the analogical reach of existing statutes, or new statutory authority specifically defining on-chain market-manipulation offenses.
None of these is imminent in the 2026 political environment. The legislative attention bandwidth is on stablecoin regulation (GENIUS Act implementation) and sanctions enforcement (Iran, DPRK, Russia corridors). MEV is not on the congressional agenda.
The legal ambiguity is the operating reality. Compliance vendors cannot wait for the law to clarify before producing risk scores. Our approach: tag MEV-operator wallets accurately at the entity_type level, propagate the tag to operationally-connected counterparties, and let our customers decide what risk threshold to apply.
For our exchange and OTC-desk customers in the US, the Sanctuary tag for MEV-operator counterparties feeds into their internal risk frameworks, which then apply customer-specific thresholds. Some customers refuse MEV-operator counterparties entirely; others accept with enhanced documentation.
The legal landscape will eventually clarify. The Peraire-Bueno retrial, if and when it proceeds, will be the most likely clarification event. Until then, the chain records the conduct, our screening tags the conduct, and our customers decide.
A federal jury could not convict MEV in 2026. The chain still recorded it.
For compliance teams: do not wait for the law to catch up to the conduct. The on-chain evidence is sufficient for risk-based decisions today. The legal framework will follow at its own pace.
For policy: the framework needs adaptation. Wire fraud cannot consistently cover MEV. The next legislative attempt — if it comes — should address the gap explicitly.
For MEV operators: the operating environment in 2026 is permissive at the legal level and increasingly restrictive at the private-actor level (Marinade, Jito bans). The risk profile is shifting from criminal to commercial. The exit ramp is via private-actor deplatforming, not via the courts.
Scam alerts, new sanctions, and investigation techniques. One email per week. Unsubscribe anytime.