Ethereum MEV Bot JaredFromSubway Threatens Legal Action After $7.5 Million Loss
Trading bot “jaredfromsubway,” known for profiting from sandwich attacks on Ethereum, was hit by a $7.5 million exploit on Saturday. Security firm Blockaid said the attacker lured the bot with fake tokens and fraudulent smart contracts, exploiting the bot’s need to grant spending permissions in some trades. Some permissions were revoked after execution, but attacker-crafted transactions left malicious spenders authorized, enabling the drain. The bot’s operator offered a 50% “white hat bounty” for return of about 2,150 ETH, worth roughly $3.7 million, within 48 hours, threatening legal action and law enforcement if ignored. After the theft, the attacker reportedly swapped part of the stolen wrapped ETH and stablecoins and moved some funds through Tornado Cash to obscure the trail.
