On June 21, the well-known MEV bot Jaredfromsubway.eth, which has long dominated Ethereum sandwich attacks, suffered a loss exceeding $7.5 million due to a hacker exploiting a vulnerability in its automated execution system. Security firm Blockaid stated that this incident was not a traditional phishing attack or a smart contract vulnerability, but rather a 'reverse MEV honeypot attack' specifically targeting the decision logic of MEV bots. The attacker deployed 66 fake token contracts and false liquidity pools over several weeks, mimicking assets such as WETH, USDC, and USDT, luring the bot into executing seemingly profitable trades and granting control to auxiliary contracts managed by the attacker. Ultimately, the attacker invoked all backdoors in a single transaction, transferring assets like ETH, USDC, and USDT from the bot's address. Previous statistics indicated that between November 2024 and October 2025, the Ethereum network experiences approximately 60,000 to 90,000 sandwich attacks monthly, with around 70% related to Jaredfromsubway.eth. Ethereum co-founder Vitalik Buterin also faced an attack from this bot when he attempted a DigitalBits exchange worth about $2 in May this year.
All Comments