Blockchain security firm Blockaid disclosed that Jaredfromsubway.eth, one of Ethereum's most active MEV bots, suffered an exploit resulting in losses of approximately $7.5 million. The attack did not exploit a typical smart contract vulnerability but instead targeted the bot's trading logic by tricking its automated system into approving tokens for attacker-controlled contracts.
Attack Method: 66 Fake Tokens Set the Trap
According to Blockaid, the attackers built a complex network of 66 fake tokens and corresponding liquidity pools. These counterfeit assets mimicked WETH, USDC, and USDT, paired with CAP tokens. The setup was designed to replicate the MEV signals bots seek, triggering the bot's automatic approval mechanism. Blockaid CTO Raz Niv commented that the process ironically opened the door for attackers to drain millions from the bot's treasury.
Etherscan data confirmed total losses at roughly $7.5 million, with part of the stolen assets subsequently laundered through Tornado Cash.
Jaredfromsubway.eth: The 'Sandwich King' of Ethereum MEV
Jaredfromsubway.eth is widely recognized as one of Ethereum's most prolific sandwich bots, profiting by inserting and bracketing trades on decentralized exchanges. This incident marks a rare major setback. Data shows Ethereum investors lose around $60 million annually to sandwich attacks. Between November 2024 and October 2025, an average of 60,000 to 90,000 sandwich attacks occurred monthly, with Jaredfromsubway.eth responsible for roughly 70% of that volume.
Past Incidents and Broader Context
In May, the bot targeted a transaction involving 26,544 DigitalBits made by Vitalik Buterin. Though the financial impact was limited, it demonstrated how MEV bots monitor even tiny profit opportunities. Etherscan records show the bot moved about $1.14 million in WETH through SushiSwap and Uniswap V2 ahead of Buterin's transaction, affecting XDB prices across two liquidity pools in the same block.
Crypto investor David Gokhshtein noted that even those previously targeted by the bot may feel little sympathy, but the development should not be celebrated. Earlier, EigenPhi highlighted how transaction slippage creates room for actors like Jaredfromsubway.eth to drive up prices, forcing users into worse rates. As of May, total MEV extraction on Ethereum exceeded $1.2 billion, with approximately 51% attributed to sandwich attacks. Vitalik Buterin has recently advocated for an encrypted mempool approach on the Ethereum roadmap to curb harmful MEV practices.