Renowned MEV bot Jaredfromsubway.eth suffers a reverse attack, losing over $7.5 million

BlockBeats News, June 21 — Jaredfromsubway.eth, a well-known MEV bot that has long dominated Ethereum sandwich attacks, was exploited by hackers through a vulnerability in its automated execution system, resulting in losses of over $7.5 million. Security firm Blockaid stated that this incident was not a traditional phishing attack or smart contract vulnerability, but a targeted "Anti-MEV Honeypot Attack" specifically against the MEV bot's decision-making logic.

The attacker deployed 66 fake token contracts and false liquidity pools over several weeks, mimicking assets such as WETH, USDC, and USDT, to lure the bot into executing seemingly profitable trades and to authorize auxiliary contracts controlled by the attacker. Ultimately, the attacker invoked all backdoors in a single transaction, transferring assets like ETH, USDC, and USDT from the bot's address.

Previous statistics from institutions indicated that between November 2024 and October 2025, the Ethereum network experienced approximately 60k to 90k sandwich attacks per month, with about 70% related to Jaredfromsubway.eth. In May of this year, Ethereum co-founder Vitalik Buterin also encountered the bot during a digital asset exchange worth about $2 involving DigitalBits.