Sandwich attacks, in particular, could be considered manipulative under SEC Rule 10b-5 and CFTC Rule 180.1, exposing validators, builders, and searchers to potential legal consequences