Jaredfromsubway.eth MEV Bot Drained for $7.5 Million in Counter-Attack

According to Blockaid, Jaredfromsubway.eth, one of crypto's most successful MEV bots, was drained of more than $7.5 million recently after an attacker exploited the bot's automated execution logic. The attacker deployed 66 fake token contracts mimicking Wrapped ETH, USDC and USDT, paired with fake liquidity pools designed to appear as profitable trading opportunities. As the bot interacted with these contracts, it granted approvals to attacker-controlled helper contracts, giving the attacker access to its treasury.

Blockaid CTO Raz Niv described the incident as a counter-MEV honeypot attack targeting the trust-minimized decision-making logic that MEV bots rely on. The attacker then executed a single transaction calling all 66 backdoors to sweep ETH, USDC and USDT from affected addresses. Some stolen funds were later sent to Tornado Cash, a crypto mixing service. The exploit reveals that highly profitable automation designed to exploit market inefficiencies can itself become vulnerable when attackers understand the bot's behavioral patterns and approval mechanisms.