Skip to main content

Can a Centralized Exchange (CEX) Environment Be Exploited by a Sandwich Attack?

A true sandwich attack, as defined in DeFi, cannot occur on a CEX because CEXs do not have a public mempool and use a deterministic price-time priority matching engine. The CEX controls the order flow, preventing external bots from observing and manipulating the queue.

However, a CEX insider with privileged information could theoretically replicate the effect of a sandwich attack by front-running a large client order, though this would be classified as insider trading and market manipulation.

What Is the Primary Function of a Matching Engine in a Crypto Exchange and How Can Its Design Prevent Front-Running?
What Is the Role of a Centralized Exchange’s Matching Engine in Minimizing Large Order Slippage?
What Is the Difference between a Public and a Private Mempool?
How Does an Exchange’s Matching Engine Affect the Execution Quality of a Complex Spread?