Odaily Planet Daily report: Jaredfromsubway.eth, a well-known MEV bot long active on the Ethereum network, was attacked by hackers exploiting a vulnerability in its automated execution system, resulting in losses exceeding $7.5 million.
Security firm Blockaid stated that this incident was not a traditional phishing attack or smart contract vulnerability, but rather a targeted "anti-MEV honeypot attack" exploiting MEV bot decision logic. Over several weeks, the attackers deployed 66 fake token contracts and fraudulent liquidity pools disguised as assets such as WETH, USDC, and USDT, luring bots into executing seemingly profitable trades and authorizing auxiliary contracts controlled by the attackers.
Ultimately, the attacker invoked all backdoor permissions in a single transaction, transferring assets such as ETH, USDC, and USDT held by the bot’s address. Data shows that between November 2024 and October 2025, approximately 60,000 to 90,000 sandwich attacks occurred monthly on the Ethereum network, with about 70% linked to Jaredfromsubway.eth. (Cointelegraph)