{"id":1570,"date":"2026-06-21T08:17:45","date_gmt":"2026-06-21T08:17:45","guid":{"rendered":"https:\/\/xrpfaucet.site\/?p=1570"},"modified":"2026-06-21T08:17:45","modified_gmt":"2026-06-21T08:17:45","slug":"ethereums-most-notorious-mev-bot-loses-7-5-million-in-on-chain-honeypot-trap","status":"publish","type":"post","link":"https:\/\/xrpfaucet.site\/?p=1570","title":{"rendered":"Ethereum\u2019s Most Notorious MEV Bot Loses $7.5 Million in On-Chain Honeypot Trap"},"content":{"rendered":"<div class=\"crypto-article\">\n<p>\ud83d\udcf0 <strong>Exclusive Crypto News &#038; Analysis:<\/strong> Stay ahead with the latest developments in the cryptocurrency and blockchain space.<\/p>\n<p>\ud83d\udcc8 <strong>Market Update:<\/strong> Real-time price movements, technical analysis, and trading signals.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/assets.beincrypto.com\/img\/lhTK4LXttMI2oPQdfbVKPd_kD-o=\/smart\/c2db8316d900418c9d446f18ac783e0f\" \/><\/p>\n<p><strong>An attacker drained roughly $7.5 million from the JaredFromSubway MEV bot, one of Ethereum&rsquo;s most active sandwich-attack systems, after tricking it into approving token spending it never should have granted.<\/strong><\/p>\n<p>Security firm Blockaid, which flagged the incident, said the bot was not hit by a smart-contract bug, a phishing attack, or a private-key leak. Instead, the attacker turned the bot&rsquo;s own profit-seeking logic against it.<\/p>\n<h2 class=\"bic-gutenberg-heading wp-heading wp-block-heading\" id=\"h-how-the-mev-bot-was-tricked\">How the MEV Bot was Tricked<\/h2>\n<p>The JaredFromSubway MEV bot runs an automated strategy that scans Ethereum&rsquo;s mempool for profitable trades. The practice is known as <a href=\"https:\/\/beincrypto.com\/learn\/maximal-extractable-value-mev\/\" target=\"_blank\" rel=\"noreferrer noopener\">maximal extractable value<\/a>.<\/p>\n<p>The bot front-runs and back-runs other trades to capture the price difference, a tactic called a sandwich attack. <\/p>\n<p>It became infamous in April 2023. In one day, it burned over $1 million in gas, nearly 8% of all <a href=\"https:\/\/beincrypto.com\/ethereum-mev-bot-guzzles-1m-gas-memecoins\/\" target=\"_blank\" rel=\"noreferrer noopener\">Ethereum gas spending<\/a>.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">I remember in 2023 jaredfromsubway was making ~$1M per day front running memecoin traders<\/p>\n<p>was truly fascinating <a href=\"https:\/\/t.co\/udufw39Zry\">https:\/\/t.co\/udufw39Zry<\/a> <a href=\"https:\/\/t.co\/KL5q4ZIfrq\">pic.twitter.com\/KL5q4ZIfrq<\/a><\/p>\n<p>&mdash; good (@thenarrator) <a href=\"https:\/\/x.com\/thenarrator\/status\/2068464369407512728?ref_src=twsrc%5Etfw\">June 20, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>The attacker spent weeks deploying 66 counterfeit token contracts. The fakes imitated Wrapped Ether (WETH), USD Coin (USDC), and Tether (USDT).<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/x.com\/hashtag\/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw\">#PeckShieldAlert<\/a> Specter has reported that <a href=\"https:\/\/x.com\/hashtag\/MEV?src=hash&amp;ref_src=twsrc%5Etfw\">#MEV<\/a> bot <a href=\"https:\/\/x.com\/hashtag\/JaredFromSubway?src=hash&amp;ref_src=twsrc%5Etfw\">#JaredFromSubway<\/a> appears to have been drained of ~$7.5M in crypto, including 1,474.58 <a href=\"https:\/\/x.com\/search?q=%24WETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw\">$WETH<\/a>2.87M <a href=\"https:\/\/x.com\/search?q=%24USDC&amp;src=ctag&amp;ref_src=twsrc%5Etfw\">$USDC<\/a>&#038; 2M <a href=\"https:\/\/x.com\/search?q=%24USDT&amp;src=ctag&amp;ref_src=twsrc%5Etfw\">$USDT<\/a>. <\/p>\n<p>The attacker swapped the stolen funds for 4.4K ETH and has already deposited 1K ETH into <a href=\"https:\/\/x.com\/hashtag\/TornadoCash?src=hash&amp;ref_src=twsrc%5Etfw\">#TornadoCash<\/a> <a href=\"https:\/\/t.co\/qY6IVDdnGJ\">pic.twitter.com\/qY6IVDdnGJ<\/a><\/p>\n<p>&mdash; PeckShieldAlert (@PeckShieldAlert) <a href=\"https:\/\/x.com\/PeckShieldAlert\/status\/2068457314416545978?ref_src=twsrc%5Etfw\">June 20, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>To the bot, these contracts looked like the routes it was built to chase. It took the bait and approved spending to attacker-controlled helper contracts. One approval alone handed over more than 92 WETH.<\/p>\n<p>A final contract then used those open allowances to <a href=\"https:\/\/etherscan.io\/tx\/0x2be8704f5a59b69e0b71f64aefdb99eb0e8ae9fb3926147c581910d71bcf3e65\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">sweep<\/a> real funds from the bot.<\/p>\n<h2 class=\"bic-gutenberg-heading wp-heading wp-block-heading\" id=\"h-a-reverse-mev-trap\">A Reverse-MEV Trap<\/h2>\n<p>The trap turned the bot&rsquo;s speed and aggression into a weakness. Hunting MEV bots is not new. In 2023, a rogue validator drained about $25 million from <a href=\"https:\/\/beincrypto.com\/eth-validator-attacks-network-takes-25-million\/\" target=\"_blank\" rel=\"noreferrer noopener\">MEV sandwich bots<\/a>.<\/p>\n<blockquote class=\"max-w-xl text-4.5 border-l-2 border-blue-600 pl-11 mb-9 select-all (&amp;_p):!mb-0 wp-block-quote quote-solid is-layout-flow wp-block-quote quote-solid-is-layout-flow\">\n<p>&ldquo;attacker-controlled contracts tricking an automated MEV execution system into granting token approvals, later used to drain funds,&rdquo; Blockaid <a href=\"https:\/\/x.com\/blockaid_\/status\/2068433798757577198?s=20\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">indicated<\/a>. <\/p>\n<\/blockquote>\n<p>Sandwich attacks like these have long drawn criticism for acting as <a href=\"https:\/\/beincrypto.com\/mev-crypto-invisible-tax\/\" target=\"_blank\" rel=\"noreferrer noopener\">an invisible tax<\/a> on everyday traders.<\/p>\n<p>The bot&rsquo;s operator put the loss closer to $15 million. They also offered a $1 million bounty for the return of the funds. Blockaid and PeckShield valued the on-chain drain at about $7.5 million in WETH, USDC, and USDT.<\/p>\n<p>The operator recovering anything may now depend on the attacker accepting that offer.<\/p>\n<p>The post <a href=\"https:\/\/beincrypto.com\/jaredfromsubway-mev-bot-honeypot-exploit\/\">Ethereum\u2019s Most Notorious MEV Bot Loses $7.5 Million in On-Chain Honeypot Trap<\/a> appeared first on <a href=\"https:\/\/beincrypto.com\">BeInCrypto<\/a>.<\/p>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>\ud83d\udca1 <strong>Pro Tip:<\/strong> Bookmark our site for daily insights, market predictions, and expert trading strategies.<\/p>\n<p>\ud83d\udd17 <strong>Explore More:<\/strong> Check our sections for in-depth guides, exchange reviews, and blockchain technology deep-dives.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ud83d\udcf0 Exclusive Crypto News &#038; Analysis: Stay ahead with the latest developments in the cryptocurrency and blockchain space. \ud83d\udcc8 Market Update: Real-time price movements, technical analysis, and trading signals. An attacker drained roughly $7.5 million from the JaredFromSubway MEV bot, one of Ethereum&rsquo;s most active sandwich-attack systems, after tricking it into approving token spending it &hellip;<\/p>\n","protected":false},"author":1,"featured_media":1571,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-1570","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/xrpfaucet.site\/index.php?rest_route=\/wp\/v2\/posts\/1570","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xrpfaucet.site\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xrpfaucet.site\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xrpfaucet.site\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/xrpfaucet.site\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1570"}],"version-history":[{"count":0,"href":"https:\/\/xrpfaucet.site\/index.php?rest_route=\/wp\/v2\/posts\/1570\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xrpfaucet.site\/index.php?rest_route=\/wp\/v2\/media\/1571"}],"wp:attachment":[{"href":"https:\/\/xrpfaucet.site\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1570"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xrpfaucet.site\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1570"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xrpfaucet.site\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1570"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}