I Built a White-Hat MEV Rescue Bot in Paper Mode. Here's What It Actually Proved.

VerKron — Mon, 26 Oct 2026 16:26:00 +0000

Most MEV bots are built to extract. This one was built to rescue: watch the mempool, spot an exploit in flight, confirm it on a fork, and — in theory — frontrun the attacker with the same profitable plan, sweeping the value to a vault instead of the attacker's wallet.

Theory is the operative word. The bot has never sent a live transaction. It runs in paper mode only, on replayed transactions and fork simulations. That constraint turned out to be the most useful design decision in the project, because paper mode forces a question live trading lets you dodge: what do you actually know, versus what are you assuming?

The pipeline: four modules, one rule

The bot is four modules with a strict separation:

Watcher — mempool intake, either a live read-only websocket or deterministic replay from JSONL. Every transaction is normalized and run through the detector.
Detector — pure-function rules. Each finding carries a human-readable reason explaining why it flagged. A failing rule is isolated, never fatal.
Simulator — an Anvil fork harness with impersonation and snapshot/revert. It errors on a bad RPC instead of hanging.
Rescue — two paper strategies: frontrun_replay (replay the attacker's plan pre-attack, value to the vault) and circuit_breaker (automated pause/blacklist, measured against the dump schedule).

The governing rule: a filter that cannot be evaluated is reported as unevaluated, never silently passed. In security tooling, a silent pass is a false negative wearing a lab coat.

The honest finding: the detector did not generalize

I started with a rule set derived from BiFi. It caught BiFi, not the next three incidents. Each new case forced a new rule — and that failure to generalize is the project's most important result.

BiFi (Ethereum, ~$165.6K). Flagged by a combination of flash-loan, lending-loop, and oracle-manipulation signals, scoring 170 — a confirmed finding. The paper rescue replayed the inflated-interest plan on a pre-attack snapshot.

TIP (BSC, ~$68.5K). The Mango-markets shape: three or more DEX swaps plus a lending borrow in one atomic transaction. No oracle is manipulated, so the oracle rule stays silent. That forced R8, pump-and-borrow: count the swaps, check for the borrow, flag the combination.

Cysic (BSC, ~$727K). No flash loan, no lending loop. The vector was forged off-chain message-processing authorization — indistinguishable on-chain from a legitimate bridge mint. You cannot detect it by call path, because the call path looks normal. That forced R7, anomalous mint: flag when one transaction mints 5% or more of supply to one address. Detect the anomaly, not the mechanism.

# R7 in spirit: anomaly, not call-path matching
if minted_to_one_address / total_supply >= 0.05:
    flag("anomalous mint", severity="high")
    # A legit bridge mint can look identical on-chain.
    # This is a triage signal, not proof of an attack.

GoldPesa (Base, ~$114.4K). A Uniswap v4 hook bug: the hook withdrew the whole unlock's net delta without checking its own deltas were isolated, and the attacker planted phantom debt in their own unlock in the same transaction. That forced R11, v4-hook shared-unlock accounting: the trigger is the combination — own unlock, attacker-side position, hook burn/re-mint — and the red flags are the hook's delta netting down against its expected credit, plus a position minted with zero payment in.

Case	Chain	Loss	What flagged it
BiFi	ETH	~$165.6K	Flash-loan + lending + oracle signals
TIP	BSC	~$68.5K	R8: swaps + borrow in one tx
Cysic	BSC	~$727K	R7: anomalous mint
GoldPesa	Base	~$114.4K	R11: v4 hook unlock accounting

Eleven rules, 27 tests, all passing — but the real lesson is that the case library is the detector. Every new incident becomes a fixture and a test. A rescue bot that stops learning after its first incident is a museum piece.

The Cysic math: why automation matters more than cleverness

Cysic justifies the whole project — and limits it.

In the real incident, the human response was a blacklist after about 76 minutes, containing 2.8M CYS (~$283K) of the 7.2M CYS (~$727K) moved. In paper simulation, an automated pause() at T+30 seconds freezes the full amount.

That 76-minutes-to-30-seconds gap is a latency gap, and latency is automatable. But a third-party white-hat cannot pause someone else's token: the Cysic circuit-breaker only works for the protocol itself or a delegated pauser. For everyone else, only the frontrun-replay shape applies.

So the honest pitch is narrower, and better: this bot is most valuable to protocols, as a delegated pauser and pre-deployed rescue plan, not as a lone wolf racing attackers in the public mempool.

What paper mode does not prove

Paper mode proves the patterns are detectable and the rescue mechanics work in simulation. It does not prove six things live operation needs:

Speed. Paper has no latency budget. Live needs mempool-to-flag-to-simulation-to-bundle in roughly one block: 12 seconds on Ethereum, 1.5 seconds on BSC. That means colocated infrastructure and a paid mempool feed, not a public websocket.
Adversarial ordering. Paper assumes the white-hat lands first. Live competes with other searchers. Winning needs private relays — Flashbots on Ethereum, 48 Club or BloXroute on BSC — and bribes, typically 10–50% of rescue value. The simulator's rule is to abort unless profit is at least twice gas plus bribe.
Archive state. Free RPCs do not serve the archive state a fork simulation needs. Live needs paid archive access or a self-hosted Erigon node.
Authorization. As above: pausing requires the protocol's permission. Without it, half the playbook does not exist.
Bounty negotiation. Rescue is not revenue. Protocols typically offer 10–20%, negotiated after the fact. In BiFi's case, a white-hat returned 159,103 USDC. The bot needs a human operator who can do that negotiation; code cannot.
Capital. Gas float plus bribe budget. Attack capital itself can come from flash loans, but the float cannot. A realistic BSC-first minimum viable live setup is under $100 plus a $50 BNB float.

None of this is a reason not to build. It is a reason to build in the right order: case library first, live watcher in read-only mode for two weeks to measure flag rate and false positives, and no bundle submitted until the profit gate and a human in the loop are in place for the first ten rescues.

The takeaway

If you are building detection tooling, do not ask whether your rules generalize. Assume they do not, and build the system that makes adding the next rule cheap: replayable fixtures, isolated rules, unevaluated-never-passed discipline, and a fork harness that fails loudly instead of hanging.

The exploits will keep inventing new shapes. The Cysic mint looked legitimate. The GoldPesa hook bug lived in accounting most auditors would skim past. Your detector will miss the next one too — unless the pipeline learns from it in hours, not rewrites.

That is what paper mode bought me: not a proven money machine, but a learning machine with receipts.

Paper mode only. No live transactions, no real funds. Figures are from post-mortems and fork simulations, not live rescues.

$KNOTS: the small token whose dividends are paid in a much bigger one

VerKron — Mon, 19 Oct 2026 18:09:45 +0000

$KNOTS is $STONK spelled backward. That's the joke — and the tokenomics.

Knots on Stonk is a Solana token launched through the StonkFun launchpad, built as the literal reverse of $STONK: same letters, other side of the wall. Its main liquidity pool pairs it directly against the asset it mirrors. But the interesting part isn't the branding. It's the asymmetry: KNOTS is a ~$2.9M asset whose holder rewards are paid in STONK, an asset roughly 38x its size.

The mechanism

Every transfer of $KNOTS — buys, sells, wallet-to-wallet — carries a 3% transfer tax. That tax is distributed to holders in $STONK, pro-rata. Roughly 2.5% is deducted to cover distribution and operating costs. Tax accrues until it's worth distributing, then pays out to wallets holding at least $20 of $KNOTS at that moment.

What makes this more than a promise: KNOTS is a Token-2022 mint, and the fee is enforced by the token's transfer-fee extension — on-chain, on every transfer, on any venue. The mint authority is revoked, so no new supply can ever be created. No multisig to trust, no team wallet to hope stays honest. The dividend is structural.

By the numbers (observed October 19, 2026)

Price ~$0.002865, FDV ~$2.87M, ~989.6M tokens outstanding
Main pool (KNOTS/STONK, Raydium): ~$280K liquidity, ~$112K 24h volume — volume roughly doubled since October 17
29 trading pairs across Raydium, Meteora, and Orca
STONK itself: ~$0.11, FDV ~$110M — the reward asset is ~38x KNOTS by size
A live MYC/KNOTS Raydium pool (~$3K liquidity) connects it to the Mycelium network

Sources: DexScreener token and pair endpoints; Solana mainnet for supply; knotsonstonk.com for mechanics.

What's live vs. what's planned

Live today: trading across three DEX families, a Kickback dashboard showing what your KNOTS has earned in STONK, a browser mini-game ("Reverse Jump"), a Trading Cup with a 50,000 STONK prize pool, and a MEXC listing in its Meme zone (September 9, 2026). The site is operated by KNOTS ON STONK LLC of Wyoming — real paperwork, unusual for a memecoin this young.

What's not documented: a roadmap beyond these mechanics. This is a memecoin with a working loop, not a protocol with a development schedule. Judge it on the loop.

The Mycelium connection

Knots is one of the projects in the Mycelium Strategy, which pairs $MYC liquidity directly with selected Solana projects across DeFi, RWA, AI, GameFi, and Meme. The live MYC/KNOTS pool is the on-chain receipt. Keep Knots as the subject — but the network is the context: every swap through a Mycelium pool earns fees for its liquidity providers, and each new connection is another route for $MYC.

The promising part

Most "holder reward" tokens pay you in themselves — or in something smaller and thinner than the token you're holding. KNOTS inverts that: your dividend is denominated in STONK, a deeper, larger asset from the same ecosystem, and the payout rail is enforced by the token standard itself. It cannot be turned off, redirected, or quietly abandoned without migrating the entire token. If the StonkFun flywheel keeps turning — platform activity feeding STONK — KNOTS holders collect on every rotation.

The honest risk

The 3% tax applies to your buys too. Every entry pays the toll, so the loop only favors holders if trading volume stays high enough to overcome it. Rewards depend entirely on other people's transfers: quiet markets mean thin, irregular payouts, or none at all. And liquidity is concentrated — one Raydium pool holds the vast majority of it. This is a mechanical property of a meme token, not a yield product. Treat the payouts as a bonus on a volatile asset, never as income you count on.

Curious about the Mycelium Strategy and its connection to Knots? Join the Mycelium Finance community: https://discord.gg/5M7FsQcGq

AI-created for a Mycelium Finance bounty.

DEV Community: VerKron