Corvus Labs Investigation Finds 39 Solana Validators Using Everstake's Private Orderflow Service, With $4,000/Month Priority TPU Access

A Solana SOL$97.69-2.9% Solana validator researcher has mapped the commercial infrastructure behind one of the ecosystem's more opaque revenue streams, finding that dozens of validators are paying an Everstake subsidiary for private transaction feeds that give those validators and their commercial partners preferential access to incoming orderflow.

Andrei Vacariu, founder of Corvus Labs and a Solana validator operator, published the investigation on September 14. The findings center on Everstake Blockspace by Everstake, a commercial service that sells tiered access to Solana transaction flow, ranging from early shred delivery to direct routing of MEV bundles into a validator's Transaction Processing Unit. Validators in the program receive a share of the revenue generated by the strategies that run over their orderflow.

What Blockspace Sells: ShredStream, SWQOS, and Private TPU Access

Blockspace's pricing is listed publicly on its product page. The entry tier, ShredStream Connect, costs $500 a month for delivery of Solana shreds to a single region before full slot confirmation. ShredStream Ultra, at $1,100 a month, extends coverage across six global regions with unlimited IP whitelisting. Direct Shreds, the highest shred tier, costs $4,000 a month per dedicated private IP address, offering exclusive bandwidth with no shared infrastructure and 3ms median latency across eight global edge nodes.

SWQOS routes whitelisted customer transactions ahead of standard traffic using Everstake's own validator stake during network congestion. It is sold on a usage basis through direct sales. The Relayer and TPU Adapter form the MEV execution layer and are application-gated, with pay-on-profit billing options for the TPU Adapter.

The TPU Adapter gives winning searcher bundles a direct route to a validator's TPU during that validator's leader slot, ahead of standard transaction traffic. Everstake markets the arrangement as a two-sided marketplace connecting validators, searchers, traders, DeFi protocols, and orderflow operators.

Scale: 17M SOL Confirmed On-Chain, 56.6M SOL Claimed

Blockspace's own marketing puts the program's adoption at 39 validators representing approximately 56.6 million staked SOL. Vacariu's on-chain analysis produced a more conservative figure: approximately 17 million SOL confirmed as participating, based on traceable payment flows from identified validators.

Vacariu named four validators as confirmed payment recipients in his analysis: Staking Facilities, ProStaking, RockawayX, and Stake.org.

The gap between the 56.6 million SOL Blockspace advertises and the 17 million SOL Vacariu confirmed on-chain likely reflects validators using shred delivery or SWQOS products without participating in the MEV revenue-sharing layer, or validators whose payments Vacariu could not trace directly through on-chain flows.

How the MEV Revenue Arrangement Works

Under the arrangement Vacariu described, validators supply preferential access to their incoming transaction flow to private searchers operating through Blockspace's Relayer. Searchers submit bundles; the Relayer runs a private auction; winning bundles land at the front of the validator's TPU queue during that validator's leader slot. The MEV strategies enabled include frontrunning, sandwich attacks, and just-in-time liquidity arbitrage.

Validators receive a share of the revenue generated by those strategies. Blockspace's terms prohibit frontrunning, but enforcement has been reactive. The investigation identifies the SWQOS component as particularly significant: stake-weighted quality of service is a protocol-level mechanism Solana uses to allocate bandwidth proportionally to stake. Using it to preferentially route private commercial traffic redirects a network resource toward paying customers rather than operating it as a neutral bandwidth allocator.

Ecosystem Debate: REV, Stakers, and Validator Concentration

The investigation prompted a detailed public response from a Jito ecosystem analyst writing as @brian_smith_0 on X, who identified four structural consequences of private orderflow arrangements becoming widespread across the network.

The analyst's critique covered four dimensions. No-frontrunning commitments lack real-time enforcement and have required outside intervention after the fact. Real economic value (REV), the measure of validator earnings visible to public analytics, is structurally declining as value migrates into private side arrangements that bypass transparent public auctions; the analyst suggested the community should reconsider whether REV remains a meaningful KPI if private orderflow proliferates. Average stakers bear the cost: yield accrues to validator operators and sophisticated institutional stakers who negotiate access directly, while ordinary delegators have no visibility into the revenue their stake implicitly enables. And only the largest validators can assemble the technical infrastructure for a competitive MEV operation at scale, a dynamic the analyst argued will concentrate stake over time.

Jito JTO$0.406-8.0% Jito's Block Assembly Marketplace, BAM, which the analyst said holds approximately 35% of network stake, was designed to prevent exactly these private side arrangements. BAM uses trusted execution environments to make block building transparent and structurally identical for all validators regardless of size. The analyst acknowledged that BAM's rigidity around side deals has been its primary friction point in validator onboarding: many operators prefer the flexibility to capture additional revenue streams.

"BAM was designed to put the network's user first," the analyst wrote. "That rigidity is actually our biggest blocker from a validator onboarding perspective. Many operators want flexibility for side income they can keep for themselves, despite the impact on our network's lifeblood: users."

The analyst described multi-counterparty protocol implementations as a partial but imperfect remedy and characterized the moment as one where community-level decisions about the network's orderflow architecture still matter.

Transaction V1 and the Increasing Value of Leader-Slot Access

Vacariu's investigation landed on the same day Solana's Transaction V1 upgrade went live on mainnet, increasing the maximum transaction size from 1,232 to 4,096 bytes. Operations including ZK proofs, large multisigs, and confidential transfers that previously required multiple transactions now fit into a single one. Larger and more complex transactions raise the commercial value of front-of-queue access during a validator's leader slot.

The timing sharpens a question the investigation already raises: as blockspace becomes more commercially valuable and private orderflow infrastructure matures, what should determine who gets priority access to it. Open alternatives exist. Flowra's open orderflow auction, launched in August, places the same bidding process under a transparent public mechanism. Whether protocol design, governance, market competition, or some combination of all three shapes the outcome is a question the investigation has put directly into the community's hands.

"The status quo is letting it quietly change under the surface," the Jito ecosystem analyst wrote. "The window for real discussion is now, otherwise the momentum will be irreversible."