Notorious ‘sandwich attack’ bot Jaredfromsubway.eth exploited for $7.5M
MEV bot Jaredfromsubway.eth was drained of more than $7.5 million after attacker-controlled contracts abused its automated trading logic. Blockaid said the bot was tricked into approving malicious helper contracts by fake profit-looking routes using imitation tokens and pools such as fake WETH, USDC, USDT, and Cap. Those approvals were not fully consumed during the supposed trade, leaving them open. The attacker later used them to sweep real WETH, USDC, and USDT from the bot via `transferFrom`. This was not a classic phishing attack or a normal smart-contract bug; it exploited the bot’s own MEV automation. Jaredfromsubway.eth has long been one of the most active sandwich-attack bots on Ethereum, associated with a large share of monthly attacks and substantial losses for traders.
