JaredFromSubway bot loses $7.5 million to attacker
An Ethereum MEV bot, JaredFromSubway, was exploited, resulting in a loss of approximately $7.5 million.
The incident occurred when attacker-controlled contracts tricked the bot’s automated execution system into granting token approvals.
The attacker then used the remaining allowances to drain WETH, USDC, and USDT from the bot.
The loss was due to an exploitation of the bot’s automated MEV opportunity detection and approval mechanism, not a phishing attack or smart-contract vulnerability.