## mevlog-rs - explore EVM chains from your terminal
[](https://crates.io/crates/mevlog) [](https://github.com/pawurb/mevlog-rs/actions)
Rust-based CLI tool for querying and monitoring Ethereum (and other EVM) blockchain transactions, with flexible filtering and EVM tracing capabilities. It's a tool for MEV searchers who prefer command-line workflows over web-based explorers.
There's also [a beta web version](https://mevlog.rs/) available.
`mevlog` allows you to analyze transaction details via a simple CLI interface. It currently offers the following features:
- regexp search by emmited event names
- search by ENS domain names
- filter txs based on their position in a block
- search by root method calls
- track smart contract storage changes
- detect validator bribes
- filter txs by real (including bribe) gas prices and cost
- [multiple EVM networks support](https://github.com/pawurb/mevlog-rs/issues/9)
All while working on public RPC endpoints thanks to leveraging EVM tracing via [Revm](https://github.com/bluealloy/revm).
You can [check out this article](https://pawelurbanek.com/long-tail-mev-revm) for technical details on how this project is implemented.
## Getting started
Mevlog depends on [cryo CLI](https://github.com/paradigmxyz/cryo) for fetching data. Please install it first by running:
```bash
cargo install cryo_cli
```
and then:
```bash
git clone https://github.com/pawurb/mevlog-rs
cd mevlog-rs
cargo install --path .
```
or install from the [crates.io](https://crates.io/crates/mevlog):
```bash
cargo install mevlog
mevlog watch --rpc-url https://eth.merkle.io
```
On initial run `mevlog` downloads ~120mb [openchain.xyz signatures database](https://openchain.xyz/signatures) and extracts it to `~/.mevlog`. Signatures data allows displaying human readable info instead of hex blobs.
To avoid throttling on public endpoints `watch` mode displays only the top 5 transactions from each block.
You can change it using the `--position` argument:
```bash
## display the top 20 txs from each new block
mevlog watch -p 0:19
```
## Filtering options
A few examples of currently supported queries:
- find `jaredfromsubway.eth` transactions from the last 20 blocks that landed in positions 0-5:
```bash
mevlog search -b 10:latest -p 0:5 --from jaredfromsubway.eth
```
- unknown method signature contract call in a top position (likely an MEV bot):
```bash
mevlog search -b 10:latest --method "<Unknown>" -p 0
```
- query the last 50 blocks for transaction in the top 20 slots that transferred [PEPE](https://etherscan.io/token/0x6982508145454ce325ddbe47a25d4ec3d2311933) token:
```bash
- blocks between 22034300 and 22034320, position 0 transaction that did not emit any `Swap` events:
```bash
mevlog search -b 22034300:22034320 -p 0 --not-event "/(Swap).+/"
```
- blocks range for events containing `rebase` and `Transfer` keywords:
```bash
mevlog search -b 22045400:22045420 --event "/(?i)(rebase).+/" --event "/(Transfer).+/"
```
- query by transactions that created a new smart contract:
```bash
mevlog search -b 22045400:22045420 --to CREATE
```
### Event filters
The `--event` and `--not-event` options allow filtering transactions based on emitted events. The filter criteria can be:
- a contract address matching on any emmited events `0x6982508145454ce325ddbe47a25d4ec3d2311933`
- a full event signature `Transfer(address,uint256)`
- a regular expression pattern `/(?i)(rebase).+/`
- a combination of an event signature and a contract address `Transfer(address,uint256)|0x6982508145454ce325ddbe47a25d4ec3d2311933`
You can supply mutiple `--event` and `--not-event` flags for precise control over which transactions are included or excluded.
### EVM tracing filters
All the above queries use only standard block and logs input. By enabling `--trace [rpc|revm]` flag you can query by more conditions:
- query last 5 blocks for a top transaction that paid over 0.02 ETH total (including coinbase bribe) transaction cost:
```bash
mevlog search -b 5:latest -p 0 --real-tx-cost ge0.02ether --trace revm
```
- find txs that changed storage slots of the [Balancer vault contract](https://etherscan.io/address/0xba12222222228d8ba445958a75a0704d566bf2c8):
`mevlog search -b 10:latest --touching 0xba12222222228d8ba445958a75a0704d566bf2c8 --trace rpc`
You can also filter by real (including bribe) gas price:
```bash
mevlog search -b 5:latest -p 0:5 --real-gas-price ge10gwei --trace rpc
```
All the filter conditions can be combined. Here's a complete list of currently supported filters:
```
Options:
-f, --from <FROM>
Filter by tx source address or ENS name
--to <TO>
Filter by tx target address or ENS name, or CREATE transactions
-t, --touching <TOUCHING>
Filter by contracts with storage changed by the transaction
--event <EVENT>
Include txs by event names matching the provided regex or signature and optionally an address
--not-event <NOT_EVENT>
Exclude txs by event names matching the provided regex or signature and optionally an address
--method <METHOD>
Include txs with root method names matching the provided regex, signature or signature hash
--tx-cost <TX_COST>
Filter by tx cost (e.g., 'le0.001ether', 'ge0.01ether')
--real-tx-cost <REAL_TX_COST>
Filter by real (including coinbase bribe) tx cost (e.g., 'le0.001ether', 'ge0.01ether')
--gas-price <GAS_PRICE>
Filter by effective gas price (e.g., 'ge2gwei', 'le1gwei')
--real-gas-price <REAL_GAS_PRICE>
Filter by real (including coinbase bribe) effective gas price (e.g., 'ge3gwei', 'le2gwei')
```
Both `search` and `watch` support the same filtering options.
## EVM tracing modes
### `--trace rpc`
This mode uses the `debug_traceTransaction` method. It's usually not available on public endpoints.
### `--trace revm`
This mode leverages Revm tracing by downloading all the relevant storage slots and running simulations locally. If you want to trace a transaction at position 10, Revm must first simulate all the previous transactions from this block. It can be slow and cause throttling from public endpoints.
Subsequent `revm` simulations for the same block and transaction range use cached data and should be significantly faster.
## Analyzing a single transaction data
```bash
mevlog tx 0x06fed3f7dc71194fe3c2fd379ef1e8aaa850354454ea9dd526364a4e24853660
```
This command displays info for a single target transaction. By adding `--before` `--after` arguments you can include surrounding transactions:
```bash
mevlog tx 0x06fed3f7dc71194fe3c2fd379ef1e8aaa850354454ea9dd526364a4e24853660 -b 1 -a 1
```
You can reverse the display order by adding the `--reverse` flag.
## Supported EVM chains
* [Mainnet](https://etherscan.io)
* [Base](https://basescan.org)
* [BSC](https://bscscan.com)
* [Polygon](https://polygonscan.com)
* [Arbitrum](https://arbiscan.io)
* [Optimism](https://optimistic.etherscan.io)
* [Metis](https://andromeda-explorer.metis.io/)
* [Linea](https://lineascan.build)
* [Avalanche](https://snowtrace.io)
If you want to add an EVM network, please submit a PR as described [in this issue](https://github.com/pawurb/mevlog-rs/issues/9).
## Project status
WIP, feedback appreciated.
