In blockchain networks, relay nodes are responsible for receiving, validating, and forwarding data—such as transactions and new blocks—to their peers. Relay censorship occurs when an operator of one or more of these critical infrastructure nodes abuses this position to filter the data flow. This can involve blacklisting specific wallet addresses, transaction types (e.g., those interacting with a sanctioned smart contract), or entire blocks from particular validators. The goal is not to alter the data itself, which would be invalid, but to control its visibility and inclusion in the network's mempool or blockchain.
Relay Censorship
What is Relay Censorship?
Relay censorship is a network-level attack where a node operator selectively blocks or delays the propagation of valid transactions or blocks, preventing them from reaching the rest of the peer-to-peer network.
This form of censorship poses a significant threat to network neutrality and liveness. If a sufficiently large portion of the network's relay infrastructure is controlled by a censoring entity, valid transactions can be effectively silenced, creating a split view of the network state. For example, in Proof-of-Stake systems like Ethereum, if relay nodes serving major block builders censor transactions, those transactions may never be included in a proposed block, undermining the chain's credible neutrality. Defenses include diversifying relay infrastructure, using minimal viable gossip protocols like Erlay, and implementing peer-to-peer encryption to obscure transaction content from intermediaries.
A critical real-world concern is the potential for regulatory-driven relay censorship, where node operators in certain jurisdictions are compelled to filter transactions. This contrasts with validator-level censorship, where a block producer excludes transactions. The distinction is important: relay censorship happens before block production, while validator censorship happens during it. Projects like Ethereum's PBS (Proposer-Builder Separation) and encrypted mempools aim to mitigate these risks by separating the roles of transaction selection and block building, making it harder for any single party to control the flow of information.
How Does Relay Censorship Work?
An explanation of the technical and economic mechanisms by which network intermediaries can filter or block transactions.
Relay censorship is the practice where a relay—a specialized node that forwards transactions from users to block builders—selectively withholds or alters transactions based on their content or origin. This is a form of network-level censorship that occurs before a transaction is even considered for inclusion in a block. Relays act as a critical gateway in the proposer-builder separation (PBS) architecture common in modern blockchains like Ethereum, making their behavior a significant concern for network neutrality.
The mechanism typically involves the relay operator implementing a filtering policy. This can be based on: a blocklist of sanctioned addresses (e.g., those identified by regulatory bodies like OFAC), a list of prohibited smart contract interactions, or the geographic origin of the transaction. When a user's transaction is submitted to a censoring relay, the relay's software checks it against these rules. If it matches a forbidden pattern, the relay simply drops the transaction, never forwarding it to the block builders who assemble candidate blocks.
From an economic perspective, relay censorship is often driven by compliance pressures. Builders and validators may choose to connect only to relays that filter transactions to avoid legal risk, creating a market for "compliant" relay services. This creates a censorship vector where a small number of dominant, compliant relays could effectively control transaction flow. Technically, a user can bypass a censoring relay by submitting their transaction directly to a builder or a non-censoring relay, but this requires technical sophistication and awareness of the censorship happening.
The impact is measured by the censorship resistance of the network. If a large majority of block builders rely on a set of censoring relays, a significant portion of blocks may be built without including certain transactions, causing delays or failures for users of those services. This undermines the permissionless and neutral properties of the blockchain. Monitoring tools track metrics like the OFAC compliance rate, which shows the percentage of blocks built without any transactions from OFAC-sanctioned addresses.
Solutions and mitigations are an active area of protocol development. These include crLists (censorship-resistant lists), where validators can force the inclusion of transactions, and builder reputation systems that penalize consistent exclusion. Ultimately, relay censorship highlights the ongoing tension between decentralized network ideals and external regulatory pressures, with its mechanics rooted in the strategic points of control within a blockchain's transaction supply chain.
Key Characteristics of Relay Censorship
Relay censorship occurs when a network intermediary, the relay, filters or reorders transactions based on criteria other than standard protocol rules, such as the sender's address or transaction content.
Transaction Filtering
The core mechanism where a relay actively excludes specific transactions from being included in blocks it proposes. This is often based on on-chain addresses (e.g., sanctioned entities) or transaction data (e.g., interactions with certain smart contracts like Tornado Cash).
Transaction Reordering (Frontrunning)
A subtle form of censorship where a relay does not exclude transactions but manipulates the mempool order to disadvantage certain users. This can be used for MEV extraction, such as sandwich attacks, by placing a victim's transaction between the attacker's own buy and sell orders.
Decentralization Risk
Relay censorship centralizes power over transaction flow. If a few major relays (e.g., BloXroute, Flashbots) adopt similar policies, they create a single point of failure and control, undermining the permissionless and neutral principles of the underlying blockchain.
Proposer-Builder Separation (PBS) Context
In Ethereum's PBS model, relays act as trusted intermediaries between block builders and validators (proposers). Censorship typically happens at the relay-builder layer, where builders send block headers to relays, which then filter them before presenting options to validators.
OFAC Compliance as a Driver
A primary real-world catalyst for relay censorship is compliance with regulations like OFAC sanctions. Major relays have implemented filtering to exclude transactions involving sanctioned Ethereum addresses, creating a compliant mempool separate from the neutral, public one.
Mitigation: Censorship Resistance
Protocol-level solutions aim to counter relay censorship. Key concepts include:
- Enshrined Proposer-Builder Separation (ePBS): Baking PBS into the protocol to reduce relay power.
- Commit-Reveal Schemes: Hiding transaction content until inclusion.
- Peer-to-Pool Architectures: Allowing builders to send blocks directly to many validators, bypassing centralized relays.
Where Relay Censorship Occurs
Relay censorship is not a single point of failure but a risk that can manifest at different layers of the transaction lifecycle. These are the primary infrastructure components where censorship can be applied.
Relay Censorship vs. Validator Censorship
A technical comparison of censorship vectors in Ethereum's proposer-builder separation (PBS) model, detailing the roles, capabilities, and mitigations for relays and validators.
| Feature / Vector | Relay Censorship | Validator Censorship |
|---|---|---|
Definition | The act of a relay refusing to include or propagate transactions or blocks from specific senders or containing specific data. | The act of a validator (block proposer) intentionally excluding valid transactions from a block, often to comply with external regulatory demands. |
Primary Actor | Block Builder or Relay Operator | Validator Operator (Block Proposer) |
Stage of Execution | Pre-consensus, during block building and propagation. | Consensus, during block proposal. |
Direct Control Over Block Inclusion | Indirect, via builder selection and block withholding. | Direct, as the proposer has final authority over the block's transaction set. |
Primary Mitigation in PBS | Builder diversity, permissionless relay lists, and enshrined PBS proposals. | Proposer commitments (e.g., crLists), slashing mechanisms, and validator set decentralization. |
Ease of Detection | More opaque; requires monitoring relay inclusion rates and builder behavior. | More transparent; exclusion is visible on-chain in the proposed block. |
Current Prevalence Risk (Post-Merge) | Considered a higher practical risk due to relay/builder centralization. | Considered a lower practical risk for individual validators, but a high systemic risk if mandated. |
Example Scenario | A relay rejects all blocks containing transactions from a sanctioned Tornado Cash address. | A validator, under legal order, omits a valid transaction from a specific OFAC-sanctioned address. |
Security Implications & Risks
Relay censorship occurs when a network intermediary selectively blocks or reorders transactions, undermining the core permissionless and neutral properties of a blockchain.
Definition & Mechanism
Relay censorship is the act where a relay or block builder intentionally excludes or delays specific transactions from being included in a block, based on criteria like sender, recipient, or contract address. This is distinct from validator-level censorship, as it occurs before a block is even proposed. The mechanism exploits the proposer-builder separation (PBS) model, where specialized builders assemble blocks and relays act as trusted intermediaries between builders and validators.
OFAC Compliance as a Driver
A primary catalyst for relay censorship is compliance with sanctions lists, such as those from the U.S. Office of Foreign Assets Control (OFAC). Major relays may filter transactions interacting with sanctioned Ethereum addresses (e.g., Tornado Cash contracts). This creates compliant blocks that exclude these transactions, leading to a form of soft censorship where non-compliant transactions rely on minority, non-censoring relays for inclusion, often at higher latency or cost.
Network-Level Risks
Widespread relay censorship poses systemic risks to blockchain integrity:
- Neutrality Failure: Undermines the core principle of permissionless access.
- Fragmented State Risk: If a majority of validators only accept censored blocks, a chain split could occur between compliant and non-compliant chains.
- Increased Centralization: Concentrates block production power in the hands of a few compliant entities, creating a single point of failure and reducing network resilience.
Mitigation Strategies
Several protocol-level and economic solutions aim to counter relay censorship:
- Enshrined Proposer-Builder Separation (ePBS): Moves the auction mechanism on-chain to reduce relay power.
- Censorship Resistance Lists (crLists): Allow validators to force the inclusion of certain transactions.
- Suave: A decentralized block-building ecosystem that aims to eliminate trusted relays.
- Validator Signaling: Validators can choose to prioritize relays with neutral policies, creating economic pressure.
MEV-Boost & The Relay Landscape
The MEV-Boost middleware, used by most Ethereum validators, is central to this issue. Validators outsource block building to a competitive market via relays. The dominance of a few large relays (like Flashbots, BloXroute, Blocknative) means their censorship policies have an outsized impact. Monitoring the censorship-resistant relay share—the portion of blocks built by relays with no filtering—is a key metric for network health.
Related Concepts
- Validator Censorship: A validator refusing to include transactions in a block they propose.
- Transaction Exclusion: The specific act of omitting a transaction.
- Maximal Extractable Value (MEV): The profit motive that drives the relay and builder ecosystem.
- Proposer-Builder Separation (PBS): The architectural design that enables specialized block building.
- Soft Censorship: Delaying or making transactions prohibitively expensive, rather than outright blocking.
Mitigations and Proposed Solutions
A survey of technical and economic mechanisms designed to counter the ability of centralized relay operators to filter or censor transactions within a blockchain network.
Relay censorship occurs when the centralized operators of mev-boost relays—the intermediaries between block builders and Ethereum validators—refuse to forward certain transactions, such as those interacting with sanctioned addresses. This creates a central point of failure, undermining the network's permissionless and neutral properties. Mitigations aim to decentralize this critical function, ensuring no single entity can control transaction inclusion. The primary goal is to preserve credible neutrality and liveness for all network participants.
Technical solutions focus on removing the trusted relay intermediary. Permissionless relays allow any validator to connect directly to a public, open network of block builders without a centralized gatekeeper. Protocols like EigenLayer's EigenDA for data availability and SUAVE (Single Unifying Auction for Value Expression) envision a decentralized future for block building and relay functions. Furthermore, in-protocol proposer-builder separation (PBS), a potential future Ethereum upgrade, would formalize the builder-proposer relationship at the consensus layer, eliminating the need for off-chain relays entirely.
Economic and game-theoretic approaches incentivize decentralization. Relay staking models, where operators must bond significant capital (slashing for malicious behavior), increase the cost of censorship. Multi-relay architectures encourage validators to connect to multiple relays, reducing dependence on any single one. The concept of censorship resistance as a service emerges, where specialized providers guarantee transaction inclusion for a fee, creating a competitive market that bypasses censoring relays.
Validator and user-level strategies provide immediate, practical defenses. Validators can implement proposer commitments, pledging to build their own blocks if relays withhold censored transactions, or use minimal viable relays that only perform attestation duties. End-users and applications can employ privacy techniques like mixing or cross-domain transactions to obscure origin, or route transactions through alternative entry points such as Flashbots Protect RPC, which aggregates builders to find a non-censoring path.
Frequently Asked Questions
Relay censorship is a critical topic in blockchain network resilience, concerning the ability of intermediaries to filter or reorder transactions. These questions address its mechanisms, impacts, and the technical solutions being developed.
Relay censorship is the act of a network intermediary, such as a relay or validator, intentionally filtering, delaying, or reordering transactions based on their content or origin, rather than standard protocol rules like gas price. This prevents certain transactions from being included in blocks, undermining the permissionless and neutral nature of the network. It is a form of transaction censorship that can target specific addresses, smart contracts, or types of transactions (e.g., those interacting with a sanctioned protocol).
Get In Touch
today.
Our experts will offer a free quote and a 30min call to discuss your project.