Prominent MEV Bot Jaredfromsubway.eth Targeted in Reversal Attack, Lose Over $7.5 Million

A June 21st update revealed that Jaredfromsubway.eth—a prominent MEV bot that has long dominated Ethereum’s sandwich attacks—was hacked by an adversary who exploited a vulnerability in its automated execution system, leading to over $7.5 million in losses. Security firm Blockaid clarified the incident was not a traditional phishing scam or smart contract flaw; instead, it was a "reverse MEV honeypot attack" specifically engineered to target MEV bot decision-making logic. Over several weeks, the attacker deployed 66 fake token contracts and fake liquidity pools mimicking popular assets like WETH, USDC, and USDT. This setup tricked the bot into executing what looked like high-profit transactions and approving a malicious auxiliary contract controlled by the attacker. In one final transaction, the adversary triggered all hidden backdoors to siphon assets including ETH, USDC, and USDT from the bot’s address. Prior data from the organization shows that between November 2024 and October 2025, the Ethereum network averaged roughly 60,000 to 90,000 sandwich attacks per month—about 70% of which were tied to Jaredfromsubway.eth. Even Ethereum co-founder Vitalik Buterin fell victim to this bot in May, when he completed a $2 DigitalBits exchange.