MEV Bot Jaredfromsubway.eth Drained of $7.5M in Sophisticated Ethereum Attack

One of Ethereum’s most notorious MEV bots, Jaredfromsubway.eth, has reportedly lost more than $7.5 million after a sophisticated attacker exploited the bot’s own automated trading strategy against it.

Known for conducting sandwich attacks, Jaredfromsubway.eth has become a prominent figure in the Ethereum ecosystem’s MEV (Maximal Extractable Value) landscape. Sandwich attacks occur when a bot detects a pending transaction, purchases an asset ahead of the trade, allows the user to buy at a less favorable price, and then sells immediately afterward for profit. While not technically exploits, these tactics are often criticized for increasing trading costs, driving up gas fees, and negatively impacting regular users.

According to blockchain security firm Blockaid, the recent incident was neither a phishing attack nor the result of a smart contract vulnerability. Instead, the attacker carefully manipulated the bot’s decision-making process over several weeks.

The attacker reportedly deployed dozens of fraudulent token contracts and fake liquidity pools designed to resemble legitimate trading opportunities. Some of these counterfeit assets imitated well-known cryptocurrencies and stablecoins, including Wrapped Ether (WETH), USDC, and USDT.

The deceptive setup successfully fooled the MEV bot into approving attacker-controlled contracts to spend funds on its behalf. During initial testing, those permissions were immediately used and closed. Later, however, the attacker created trading routes that left token approvals active, providing ongoing access to the bot’s assets.

Using these open permissions, the attacker drained more than $7.5 million worth of WETH, USDC, and USDT from Jaredfromsubway.eth-controlled contracts. Blockchain data reviewed by CoinDesk indicates that a portion of the stolen funds was subsequently moved through Tornado Cash, a privacy-focused cryptocurrency mixer.

The incident carries a notable irony. Jaredfromsubway.eth has long been associated with a significant share of Ethereum’s sandwich attacks, which reportedly cost traders around $60 million annually. Estimates suggest the bot was responsible for roughly 70% of sandwich attacks recorded between November 2024 and October 2025.

The attack highlights the growing risks associated with automated trading systems that execute decisions at machine speed. While the event does not reduce the impact of harmful MEV practices, it demonstrates how sophisticated attackers can exploit algorithmic strategies that rely heavily on pattern recognition and profit-seeking behavior.

After years of profiting from unsuspecting traders, Jaredfromsubway.eth ultimately became the victim of a highly calculated on-chain trap that its own system failed to detect.