Search papers, labs, and topics across Lattice.
The Themis Consensus Extension v1 addresses maximal extractable value (MEV) by introducing a dual approach that separates value extraction by reordering (VER) from value extraction by denial (VED). By employing a deterministic seed for transaction execution and allowing users to encrypt transactions for specific builders, the framework mitigates unilateral post-commit ordering control and obscures transaction intent. The analysis reveals that while the design limits certain MEV risks, it does not achieve complete censorship resistance or guarantee fairness in transaction ordering.
MEV mitigation can be achieved without sacrificing transaction privacy, but the trade-offs in fairness and censorship resistance remain significant.
Maximal extractable value (MEV) arises when privileged participants select, exclude, insert, or reorder pending transactions for private gain. We specify and analyze the Themis Consensus Extension v1, first published by Mangata in 2021. The design separates value extraction by reordering (VER) from value extraction by denial (VED). For VER, block construction and execution occur across consecutive producers: one producer commits a transaction set, and the next derives a publicly verifiable, deterministic, previously un- predictable seed and executes a seed-determined, dependency-preserving permutation. For selective VED, a user may encrypt a transaction for a designated builder and executor. The builder removes an outer layer and commits the opaque inner ciphertext; the executor reveals and executes the plaintext only after commitment. Under selfish but non-colluding validators, an adversary below the underlying consensus fault threshold, secure cryptography, and accountable role performance, the construction limits unilateral post-commit ordering control and hides transaction intent from relays and the builder. It does not provide send-order or receive-order fairness, complete censorship resistance, resistance to builder-executor collusion, or per-transaction price guarantees. We analyze probabilistic extraction, spam, dependent transactions, decryption liveness, session boundaries, total denial, and threshold coalitions. We also document the initial Aura-based Substrate implementation and its subsequent transition to a BABE-based sr25519/VRF seed path, together with delayed execution, Fisher-Yates shuffling, and Xoshiro256++. The result preserves the original proposal while narrowing its claims to explicit assumptions.