On June 21, the well-known MEV bot Jaredfromsubway.eth, which has long dominated Ethereum sandwich attacks, suffered over $7.5 million in losses due to a hacker exploiting a vulnerability in its automated execution system. Security firm Blockaid stated that this incident was not a traditional phishing attack or a smart contract vulnerability, but rather a 'reverse MEV honeypot attack' specifically targeting the decision-making logic of MEV bots. The attacker deployed 66 fake token contracts and fraudulent liquidity pools over several weeks, mimicking assets like WETH, USDC, and USDT, to lure the bot into executing seemingly profitable trades and granting control to auxiliary contracts managed by the attacker. Ultimately, the attacker invoked all backdoors in a single transaction, transferring assets such as ETH, USDC, and USDT from the bot's address. Previous statistics indicated that between November 2024 and October 2025, the Ethereum network experiences approximately 60,000 to 90,000 sandwich attacks per month, with about 70% related to Jaredfromsubway.eth. Ethereum co-founder Vitalik Buterin also encountered this bot's sandwich attack earlier this May while executing a DigitalBits exchange worth approximately $2.
All Comments