MEV is the value someone can extract from a blockchain by controlling the contents and order of a block, over and above the ordinary fees and rewards for producing it. The acronym came from Flash Boys 2.0 (Daian, Goldfeder, Kell, Li, Zhao, Bentov, Breidenbach and Juels, April 2019), which documented arbitrage bots bidding transaction fees up against each other in what the authors called priority gas auctions, and argued that fees paid for ordering are large enough to be a consensus-layer security risk rather than a trading curiosity. It stood for “miner extractable value”; after Ethereum moved to proof of stake the expansion drifted to maximal extractable value, which is how CoW Protocol's documentation and most of the industry now write it.
The reason the concept refuses to go away is that ordering is a real economic right and somebody always holds it. A blockchain does not execute transactions as they arrive; it executes them in the sequence a block producer chooses. Whoever chooses that sequence can put their own trade first, insert one on either side of yours, or sell that privilege to someone who will. Every general-purpose chain has this property. The only open questions are who captures the value, whether the people who generate it get any of it back, and what the fight over it does to the rest of the system.
MEV is not a single trade. It is a family of strategies that share one input – a temporary, mechanical mispricing that only exists because state changes in a discrete order.
That last category has a formal name. In Automated Market Making and Loss-Versus-Rebalancing (Milionis, Moallemi, Roughgarden and Zhang, 2022, revised 2024) it is called loss-versus-rebalancing, or LVR – presented as a “Black-Scholes formula for AMMs”. The paper identifies the adverse-selection cost an AMM liquidity provider bears because the pool quotes stale prices that better-informed arbitrageurs pick off, and derives closed-form expressions for it across all constant-function market makers. The important consequence for a DAO is that LVR is structural, not an attack: it is the standing cost of running an on-chain market maker against off-chain price discovery, and it shows up whether or not anyone behaves badly.
The priority gas auctions described above ran through the protocol’s own auction for block space, the transaction fee, and that auction has a design problem of its own. In a 2018 post, Vitalik Buterin set out why neither standard format fits: pay-your-bid gives senders no simple way to choose a bid, while charging every included sender the lowest included bid lets the block producer lift the price with transactions of its own, or collude with senders to raise their bids and refund them through a separate channel.
Hao Chung and Elaine Shi proved that no fee rule can solve both problems at once, a mechanism-design impossibility result published as Foundations of Transaction Fee Mechanism Design (SODA 2023): with finite block space, no non-trivial mechanism can both make truthful bidding each user’s best strategy and stop the producer gaining through a side contract with a single user. On a chain with smart contracts, the paper notes, such side contracts are binding and easy to arrange.
On Ethereum the ordering right is no longer exercised by the validator who proposes the block. It is auctioned through a four-layer pipeline that MEV-Boost formalised as proposer-builder separation:
The stated goal was decentralisation: separating who builds from who proposes was meant to let a home validator earn the same MEV income as a sophisticated one. On that narrow measure it worked. On concentration it did not. Over the seven days to 25 September 2026 (read at slot 15,293,716), relayscan.io recorded Titan building 54.99% of MEV-Boost blocks and BuilderNet 18.61%, so two builders produced about three blocks in four, with Quasar at 16.88% and Eureka at 3.92% making up most of the remainder.
Two weeks earlier Quasar had been second at 19.96% and BuilderNet third. Three relays carried 86.6% of relay-delivered payloads between them: ultrasound.money (31.24%), Titan Relay (30.01%) and bloXroute’s regulated relay (25.35%), with aestus.live (9.41%), the Flashbots relay (2.16%), relay.ethgas.com (1.13%) and agnostic-relay.net (0.70%) behind them. Those relay shares count deliveries rather than blocks: 91,837 payload deliveries against 46,130 MEV-Boost blocks in the same window, so a block reaches its proposer through about two relays on average, and no relay figure here should be read as a share of the chain.
One relay has left the market since August. bloXroute max-profit, which carried 21.58% of deliveries in a reading taken that month, has stopped: the hostname no longer resolves, and bloXroute’s own validator documentation now names a single Ethereum mainnet relay, Regulated, which by its own description propagates every transaction and bundle except those interacting with OFAC-sanctioned addresses. Block construction is a competitive market with a handful of competitors, which is a different thing from a decentralised one.
The proposed fix is to bring the auction inside the protocol. EIP-7732, “Enshrined Proposer-Builder Separation”, would make builders an in-protocol entity: the consensus proposer commits to a builder's signed bid, the value is deducted from the builder's own stake, and a payload timeliness committee attests to whether the builder actually revealed the block it promised. It was created in June 2024 and is still at Review status, but it is now one of the EIPs scheduled for inclusion in Glamsterdam, the next Ethereum network upgrade. That meta-EIP leaves the mainnet activation epoch blank until client teams decide it (read 25 September 2026), so enshrined PBS is scheduled rather than shipped.
MEV is often described as a tax on traders. That undercounts it. The bill lands on three groups, and only one of them is aware of it in the moment.
Framed in the language of transaction costs, extraction is a friction that neither counterparty agreed to and neither can price in advance. Framed as a principal-agent problem, the party choosing the order is not the party bearing the loss, and the loss is invisible in the accounts of the party bearing it.
Three distinct things break for a DAO, and they break in different places.
A vote is an advance announcement of a trade. On-chain governance is a public, timestamped statement of intent with a built-in delay: the proposal names the asset, the size and often the venue, the voting period runs for days, and the timelock adds more. By the time a treasury diversification executes, every searcher on the network has had a week's notice of exactly what is coming. The transparency that makes on-chain governance auditable is the same property that makes its execution predictable, and predictable order flow is the single most valuable input a searcher can have. This is one of the strongest practical arguments for ballot privacy and delayed disclosure – not to hide how members voted, but to stop the treasury telegraphing its own execution.
Extracted value never reaches the fee switch. A DAO's fee switch can only route revenue the protocol actually collected. Value that leaves through arbitrage against the protocol's own pools was never collected in the first place, so it does not appear in any revenue figure a token valuation is built from. A protocol can look structurally unprofitable while generating substantial value, simply because that value is captured one layer below its accounting. Aerodrome makes this explicit in its own design language, describing value normally lost to arbitrage bots as something the protocol should keep.
MEV is now a staking-yield line item, and someone has to decide the split. On Solana, Jito routes MEV rewards to validators and their stakers rather than leaving them with the searcher, which makes the split a governance parameter of a DAO rather than a market outcome. Any DAO holding a liquid staking token therefore holds an exposure to another DAO's MEV policy alongside the slashing exposure it already carries. Osmosis takes the other route and handles ordering at the protocol layer instead of an out-of-protocol auction.
No production system eliminates MEV. The designs that work either make ordering worthless, hide the information ordering depends on, or return the proceeds to whoever generated them.
www.smg.org/memo/mevblocker, which returns 404 – but so does www.smg.org/ itself, so nothing at all is served at that host, and the apex smg.org answers 403 from openresty on every path, which is a bot-block rather than an answer. The memo is not lost, though: the Internet Archive captured it three times, and the capture of 13 March 2026 carries both figures quoted above and gives contact_smg@consensys.net as the contact address. mechanism.org, the site CoW DAO’s announcement gives as SMG’s own, still does not resolve (all checked 11 September 2026). The RPC is unaffected and its counters are live. That transfer is the concentration argument in miniature. The endpoint behaves exactly as before, the URL and the metrics are unchanged, and the party that now sees the protected order flow of millions of wallets is the same company that ships MetaMask and Infura. MEV-Share runs the same idea from the Flashbots side, selectively revealing transaction details according to the sender's privacy preference and accepting backruns only.Each buys protection with a different cost: batch auctions add latency, private RPCs concentrate order flow in whoever operates the endpoint, and enshrined designs are consensus changes that take years.
Most of the useful moves are operational rather than constitutional, and none of them require a protocol change:
Caper does not solve MEV, and no design at the application level would. It changes one surface: the moment a member turns a governance claim into value. A member of a caper can exit at any time for their fair share of the treasury, paid by the caper’s own contract rather than routed through a liquidity pool, so a treasury exit is not an order sold into a pool whose depth a searcher can trade against. The governance tokens handed in on exit are sold back along the caper’s bonding curve, whose shape is fixed in the contract rather than set by how much liquidity a pool holds at that instant.
Ordering still matters on that curve, as on any curve-priced asset: a trade placed ahead of another moves the price the later one gets.