Notorious ‘sandwich attack’ bot Jaredfromsubway.eth exploited for $7.5M
Cointelegraph 2026-06-21 00:04:47
Context: A sophisticated attacker has exploited a notorious 'sandwich attack' bot, Jaredfromsubway.eth, for $7.5 million by tricking its automated systems into granting token approvals. The bot, responsible for 70% of sandwich attacks on Ethereum between November 2024 and October 2025, has netted hundreds of millions over the years. The incident occurred through a rare counter-MEV honeypot attack.
Key Facts
- Jaredfromsubway.eth, one of the most successful MEV bots in crypto, was drained for more than $7.5 million after an attacker exploited its automated MEV execution system bot.
- The incident resulted from attacker-controlled contracts tricking Jaredfromsubway.eth’s automated system into granting token approvals that were later used to drain funds, according to Blockaid.
- Between November 2024 and October 2025, Jaredfromsubway.eth was responsible for 70% of sandwich attacks on Ethereum, with Cointelegraph Research finding that sandwich attacks on Ethereum resulted in about $60 million in annual losses for traders.
- The attacker deployed 66 fake token contracts that mimicked the names and interfaces of Wrapped ETH (WETH), USDC (USDC), and USDt (USDT) and paired them with fake liquidity pools to lure Jaredfromsubway’s bot into approving certain attacker-controlled helper contracts.
- Some of the stolen funds have already been sent to crypto mixing service Tornado Cash, according to onchain data, with Ethereum co-founder Vitalik Buterin previously being sandwich attacked by Jaredfromsubway.eth in May.