Layer-1 blockchain network Aptos has officially deployed an optional new feature designed to safeguard traders, institutional participants, and automated systems from predatory maximal extractable value (MEV) tactics, including frontrunning and sandwich attacks.
Announced on Monday, the implementation of the Encrypted Mempool feature on the Aptos mainnet allows network users to deliberately opt in to a system that keeps their pending transactions entirely obscured until block ordering has been fully finalized. According to the network’s development team, this capability has been specifically engineered to cater to large institutional entities executing high-volume transfers, everyday traders looking to insulate themselves from aggressive MEV extraction, emerging autonomous AI agents, and decentralized application builders.
In a public statement detailing the release, Aptos highlighted the inherent transparency risks present across contemporary blockchain architectures. When users initiate a transaction on nearly any major public blockchain network today, the underlying data remains completely exposed to anyone monitoring the mempool prior to execution. Observers can readily identify the specific function being called, the exact digital assets and amounts involved, and the smart contracts being engaged. Automated trading bots continuously scan this public visibility to intercept user intent, trading against them or directly copying their high-value strategies to siphon away potential profits.
The economic toll of these predatory practices across the broader cryptocurrency landscape is substantial. Sandwich attacks—a prevalent form of MEV where a bot detects a pending user trade, inserts its own buy order just ahead of it, and subsequently sells immediately afterward at an inflated price—cost Ethereum-based traders approximately $60 million over the twelve-month period leading up to October 2025. This figure was derived from comprehensive industry research and data analysis provided by EigenPhi. Meanwhile, a parallel investigation conducted by Bitquery examining network activity on Solana revealed that sandwich attacks generated an estimated $29.7 million for opportunistic extraction bots over an eleven-month window, capturing nearly 6.9 million distinct attacks that directly impacted approximately 2.2 million unique user wallets.
How Encrypted Mempool Works
To utilize the new protection mechanism, users who choose to opt in rely on a compatible wallet application or software interface that securely encrypts the transaction contents directly on the user’s local device before it is transmitted to the Aptos network. Sensitive parameters, such as the exact tokens and amounts being transferred, remain completely shielded from public view, while foundational routing metadata, including the sender’s wallet address and associated gas fees, remain visible to ensure proper network processing.
Once encrypted, the transaction enters the network mempool, serving as the holding area where pending transactions wait to be selected and organized into an upcoming block. During this critical phase, network validators achieve consensus on the precise chronological order of the transactions while remaining entirely blind to the underlying payload data.
This rollout aligns with broader strategic initiatives within the ecosystem. The development follows previous infrastructure commitments, such as the Aptos Foundation and Aptos Labs allocating $50 million toward building out infrastructure specifically tailored to support autonomous AI agents, which frequently execute programmatic onchain transactions that are vulnerable to external manipulation.
Once the sequencing of the block is definitively finalized, the network validators collectively decrypt the pending transactions in unison. Following decryption, the transactions are formally executed and permanently recorded on the blockchain ledger. The system is designed so that no single individual validator possesses the cryptographic capability to decrypt a pending transaction in isolation, ensuring a decentralized and trustless execution environment.
By keeping transaction parameters hidden until their exact block positioning is permanently locked in, the system effectively neutralizes the ability of automated bots to read pending orders in real-time and insert their own predatory trades ahead of or around legitimate user activity.
However, this elevated level of transactional privacy introduces certain operational trade-offs, including incremental transaction costs and a minor processing delay. According to technical documentation published by Aptos developers, encrypted transactions require a minimum gas price set at twice the network’s standard base minimum. Furthermore, performance benchmarks testing the architecture across 50 validator nodes indicated that the threshold encryption and decryption processes add approximately 20 milliseconds per block when compared against the network’s legacy consensus implementation.
Aptos now joins a select group of alternative layer-1 and layer-2 networks that actively provide native or integrated defenses against harmful MEV extraction. Gnosis Chain rolled out a dedicated encrypted mempool utilizing Shutter threshold encryption technology in July 2024, whereas Ethereum ecosystems frequently rely on off-chain routing mechanisms such as Flashbots Protect, which routes user transactions privately directly to specialized block builders.
Aptos emphasizes that its architectural distinction lies in its utilization of its existing validator set to handle both transaction ordering and collective decryption natively, eliminating the need to rely upon a separate external decryption committee or trusted centralized block builders.
