Infamous MEV Bot Jaredfromsubway.eth Drained of $7.5M in Honeypot Attack

TLDR

• MEV bot Jaredfromsubway.eth was drained of over $7.5 million on Saturday
• An attacker deployed 66 fake token contracts over several weeks to trick the bot
• The bot was manipulated into approving attacker-controlled contracts to spend its funds
• Security firm Blockaid called it a “counter-MEV honeypot attack”
• Some stolen funds have already been sent to Tornado Cash

One of the most well-known bots in crypto has been turned against itself. Jaredfromsubway.eth, an automated program that made millions by exploiting other traders, was drained of more than $7.5 million on Saturday.

The attack was confirmed by blockchain security firm Blockaid.

How the Attack Worked

The attacker spent several weeks setting a trap. They deployed 66 fake token contracts that looked like Wrapped ETH, USDC, and USDT. These were paired with fake liquidity pools designed to look like profitable trades.

The bot did exactly what it was built to do. It spotted what looked like an opportunity and approved certain contracts to spend funds on its behalf.

That was the moment the attacker needed. In a single transaction, all 66 backdoors were triggered at once, sweeping the bot’s holdings in ETH, USDC, and USDT.

What Is Jaredfromsubway.eth?

MEV bots monitor unconfirmed transactions on blockchain networks and manipulate the order they are processed in to extract profit. This is sometimes called an “invisible tax” on users.

Sandwich attacks are one common method. A bot spots a pending trade, places its own transaction before and after it, and profits from the price movement.

Between November 2024 and October 2025, Jaredfromsubway.eth was responsible for roughly 70% of all sandwich attacks on Ethereum. Cointelegraph Research estimates that sandwich attacks cost traders around $60 million per year, with 60,000 to 90,000 attacks happening each month at peak.

In May, Ethereum co-founder Vitalik Buterin was sandwich attacked by this same bot while swapping a small amount of DigitalBits. The financial loss was minimal, but it showed no transaction is too small to target.

Some of the stolen funds have already been moved to Tornado Cash, a crypto mixing service, according to onchain data.

The attack is one of the largest single losses ever recorded for an MEV bot.

The post Infamous MEV Bot Jaredfromsubway.eth Drained of $7.5M in Honeypot Attack appeared first on CoinCentral.