JaredFromSubway MEV Bot Hack 2026 — $8M Exploit Analysis

Ethereum's most notorious MEV sandwich bot was drained for $7.5M after being baited into approving 66 fake token contracts over several weeks.

Details

• Date: 2026-06-20
• Amount Lost: $7,500,000
• Chain(s): Ethereum
• Category: Social Engineering
• Technique: Honeypot attack using 66 fake token contracts. Attacker deployed fake tokens and liquidity pools that appeared profitable. Bot interacted with them over weeks, granting approvals. Final coordinator contract withdrew from all 66 contracts at once.
• Status: Funds Laundered
• Amount Recovered: None reported

Full Description

On June 20, 2026, the notorious Ethereum MEV bot jaredfromsubway.eth was drained of ~$7.5M. The attacker deployed 66 fake token contracts imitating WETH, USDC, and USDT with fake liquidity pools. Over several weeks, the bot's automated system interacted with these contracts and unknowingly granted token approvals. On June 20, a coordinator contract called withdrawal across all 66 fake contracts simultaneously, draining 1,474.58 WETH, 2.87M USDC, and 2M USDT. The attacker converted stolen assets into ~4,427 ETH. The bot operator claimed $15M losses and offered a $1M bounty.

Laundering Analysis

Attacker converted stolen assets into ~4,427 ETH. Routed 1,000 ETH through Tornado Cash. Remaining ETH distributed across multiple addresses. No recovery reported.

Sources

• https://www.cryptotimes.io/2026/06/22/ethereum-mev-bot-jaredfromsubway-drained-in-15m-honeypot-attack/
• https://coinmarketcap.com/academy/article/ethereum-mev-bot-drained-for-dollar75m

Transaction Hashes

• 0xjared-exploit-1

Related Hacks

• Drift Protocol — 2026-04-01 — $285M
• Trezor Social Engineering Scam — 2026-01-10 — $282M
• Step Finance — 2026-01-25 — $29M
• Meteora — 2026-01-17 — $2M

Back to Browse