JaredFromSubway MEV Bot (2026) — Crypto Hack
Funds LaunderedEthereum's most notorious MEV sandwich bot was drained for $7.5M after being baited into approving 66 fake token contracts over several weeks.
Summary
Ethereum's most notorious MEV sandwich bot was drained for $7.5M after being baited into approving 66 fake token contracts over several weeks.
How It Was Compromised — Social Engineering via Honeypot attack using 66 fake token contracts. Attacker deployed fake tokens and liquidity pools that appeared profitable. Bot interacted with them over weeks, granting approvals. Final coordinator contract withdrew from all 66 contracts at once.
On June 20, 2026, the notorious Ethereum MEV bot jaredfromsubway.eth was drained of ~$7.5M. The attacker deployed 66 fake token contracts imitating WETH, USDC, and USDT with fake liquidity pools. Over several weeks, the bot's automated system interacted with these contracts and unknowingly granted token approvals. On June 20, a coordinator contract called withdrawal across all 66 fake contracts simultaneously, draining 1,474.58 WETH, 2.87M USDC, and 2M USDT. The attacker converted stolen assets into ~4,427 ETH. The bot operator claimed $15M losses and offered a $1M bounty.
Fund Flow & Laundering Analysis
Attacker converted stolen assets into ~4,427 ETH. Routed 1,000 ETH through Tornado Cash. Remaining ETH distributed across multiple addresses. No recovery reported.