i wouldn't be surprised if this is a MEV bot attack. many things don't add up. this is why private transactions matter in defi.