Ethereum MEV Bot ‘Jaredfromsubway.eth’ Suffers $7.5M Exploit via Transaction Approval Trap
The prominent Ethereum Maximal Extractable Value (MEV) bot, known as Jaredfromsubway.eth, has reportedly been exploited, leading to a loss of approximately $7.5 million. The incident, detailed in an analysis by on-chain...
Watchlist
Archive context. The story has cross-source confirmation.
The prominent Ethereum Maximal Extractable Value (MEV) bot, known as Jaredfromsubway.eth, has reportedly been exploited, leading to a loss of approximately $7.5 million. The incident, detailed in an analysis by on-chain security firm Blockaid, points to a sophisticated transaction approval trap mechanism as the method of attack.
According to the analysis shared on X, the exploit targeted a vulnerability within the bot’s router contract. Jaredfromsubway.eth is recognized as one of the most active and gas-intensive arbitrage bots operating on the Ethereum network. The attacker is reported to have utilized custom smart contracts to manipulate the bot into executing unprofitable sandwich transactions. This maneuver ultimately led to the draining of the bot’s contract balance.
TL;DR:
- Prominent Ethereum MEV bot Jaredfromsubway.eth exploited for $7.5 million.
- Attack utilized a transaction approval trap targeting a router contract vulnerability.
- Sophisticated automated bots remain susceptible to protocol-level smart contract traps, as noted by Blockaid.
Blockaid, which first detected and flagged the exploit on its on-chain monitoring channels, explains that the attack involved forcing the bot into specific, unfavorable transactions. The analyst says this was achieved by leveraging a weakness in how the bot processed transaction approvals. Essentially, the attacker tricked the bot into approving and executing trades that benefited the attacker at the bot’s expense.
The incident serves as a stark reminder that even highly sophisticated automated trading systems and bots, like Jaredfromsubway.eth, are not immune to clever smart contract exploits. The security firm’s commentary, available in full on X, provides further details on the on-chain metrics observed during the exploit. This event suggests that ongoing vigilance and robust smart contract security auditing are crucial, even for established and gas-hungry participants in the Ethereum ecosystem.
The primary source for this analysis can be found at https://x.com/blockaid_/status/2068433798757577198.
Disclaimer: This article discusses market/technical analysis and is for informational purposes only. It does not constitute investment advice, financial advice, or an endorsement by NewsBTC of any analysis or trading setup. This analysis was originally shared by analyst on X @blockaid_ on X at X post.
This article was written by the News Desk and edited by Samuel Rae.
This article is based on commentary shared on X by @blockaid_. at @blockaid_ on X
Why this matters
Ethereum is showing up inside the Security Incidents theme, so this story is worth tracking for follow-through rather than treating it as a one-off headline.
Original source
Read on NewsBTCRelated market context
Ethereum and Layer 1s Explained
Ethereum 101 explains how Ethereum made blockchains programmable. It covers smart contracts, accounts and the EVM, ETH and gas fee...
Ethlabs Calls for Ethereum Quantum Protection in 2027 as Upgrade Priorities Shift
TL;DR: Ethlabs proposes quantum readiness in 2027 and plans to withdraw its quick-slots work from Hegotá. Developers still need to...
Onramp Launches Business Bitcoin Accounts With Team Withdrawal Approvals
TL;DR: Onramp has launched a business Bitcoin account with named users, role permissions and withdrawal approvals. A separate Trea...
Ethereum Dancing on Two Fronts as Quantum Upgrade Advances and Treasury Leverage Bites
Ethereum developers want to upgrade the network to be quantum-ready by 2027, potentially accelerating one of its biggest security...
Robinhood’s Crypto Trading Volume Falls 48% in October as Event Contracts More Than Double
Bitcoin Magazine Robinhood’s Crypto Trading Volume Falls 48% in October as Event Contracts More Than Double Crypto trading on Robi...
Safepal Hardware Wallet Users Receive Fake Security Alerts in the Mail
Safepal customers in Italy are reportedly being targeted by a sophisticated phishing campaign involving fraudulent letters contain...