Crypto news

A major MEV bot, Jaredfromsubway.eth, which long dominated the sandwich attack landscape on Ethereum, has suffered a crushing defeat. As a result of a sophisticated hacking operation, its wallets lost assets worth over $7.5 million.

Attack Mechanics: Reality Substitution

Analysis of the incident shows that the attacker did not exploit standard smart contract vulnerabilities or phishing. Instead, an entire network of fake token contracts was deployed, mimicking WETH, USDC, and USDT. These counterfeit assets were linked to fake liquidity pools that appeared as high-yield trading opportunities.

The automated MEV bot system, configured to seek arbitrage and sandwich trades, fell for this bait. The bot granted the attacker's auxiliary contracts permission to spend real assets, believing it was participating in a legitimate trade. With a single transaction, the hacker activated all backdoors and drained the bot's wallet. Part of the stolen funds has already been laundered through Tornado Cash.

Context: Monopoly on Sandwich Attacks

This incident is particularly ironic given the scale of Jaredfromsubway.eth's operations. According to my data, from November 2024 to October 2025, between 60,000 and 90,000 sandwich attacks were recorded monthly on the Ethereum network. Approximately 70% of these operations were attributed to this bot. Annual trader losses from such manipulations are estimated at around $60 million.

It is worth recalling that as early as June 2024, Jaredfromsubway.eth became the largest gas consumer on Ethereum, highlighting its dominant position.

Expert Conclusion

This is a clear example of how even the most advanced automated systems can be deceived if an attacker creates a convincing simulation of the market environment. MEV bots, which for years parasitized regular users, have themselves proven vulnerable to more sophisticated tactics. The cryptocurrency market does not forgive overconfidence—neither for traders nor for bots.